Hope someone can help, am having a bit of a problem routing two vlans through a firewall. I've sub interfaced a nic on a FW to have two vlans attached to the physical nic.
On the uplink to the interface on the FW I've configured the port to be tagged. Then on the two ports to the two differing PCs in the different vlans I've put them in an untagged port but also tagged the uplink port in on the vlan.
So vlan to FW port is tagged
Vlan x to PC1 port is untagged for PC but FW port tagged into vlan
Vlan y to PC2 port is untagged for PC but FW port tagged into vlan
I thought this would have worked but no joy. I've tried variations of the above but not working. I can see the ip address of the FW nic in the arp table but not the PCs
I can putty on to the FW and see in arp table and ping both PCs so FW config seems okay.
What am I missing? Any help gratefully received.