SG300-20 behind firewall with two vlans

Question

Hello,
i have the following network running: see attachment. The switch has two VLANs, one for the 10. network, the other should be for the 192. network. Now i want to access 10.0.1.11 from 192.168.178.1 but i get blocked by the firewall. The switch is now in the 192.network, but i want to connect the 10.* ports directly to the router. I am grateful for every hint.
Best regards,
Rome

Answer 1

I would recommend adding a 2nd vlan interface to your firewall, and enable inter vlan routing on the firewall.
It would be good to set a different network segment between the router and firewall,
It would look something like this.
router --> firewall vlan1 -->switch vlan1 -->192.168.178.x clients
                firewall vlan10 -->switch vlan 10 --> 10.0.1.x clients
You don't say what the router or firewall models are, or the subnet masks...
The default gateways for the clients would point to the firewall, and it would do intervlan routing.
Or:
You can do intervlan routing on the switch.
set the switch in layer3 mode (this will factory reset the switch).  Set up the 2 client vlans, including dhcp with default gateways for the clients pointing to the switch.
select a different network segment for the firewall to switch connection (say 192.168.180.x)
add a route, rules, and nat statements in the firewall for both networks 192.168.178 and 10.0.1.x.
add a default route in the switch pointing to the firewall.
that would look something like
router - firewall -(192.168.180.x) - switch  - vlan 10.0.1.x
                                                             \- vlan 192.168.178
This would put the inter vlan routing load on the switch instead of the firewall.
you can also call in to the small business TAC and request assistance 866-606-1866 in US and Canada.  These devices come with 1 year free tech support.
Hope this helps,
Dan