Here is network schema: - Switch layer 2 ---|                     |--X0 LAN
                                  |---Switch layer 3 ---| --- Swtich layer 2 ---|                     |--X6 LAN
                                                        |-- WAN

The layer-3 switch has multiple IP addresses:,, and

The default route for the layer-3 switch is for gateway

There are three VLANs on the the layer-3 switch, and routing is enabled.

VLAN1 (192.168.2) is the default VLAN. There were 3 switches. I changed those switches to make VLANs, change network addressing, and delete all 192.168.2 addresses.

There are other VLANs, but for clarity I show only one.

I've got these issues:

  • When machine has for its gateway, it can get to the Internet and ping 10.50.60, but it can't ping 10.50.40.*.
  • Machines in 10.50.40.* have the gateway, can't get to the Internet, can't ping, can ping all other 192.168.2, but they can't make MSTSC or access network shares or nslookup the DNS (all services can't go).

So, I've made these changes:

  • On the SonicWALL, I've added a route to access 10.50.40 with gateway

  • Now, from, I can ping 10.50.40 and 10.50.60, but from 192.168.2 and from 10.50.40, I can't MSTSC or network share or whatever.

Another change:

  • On machine, I set the gateway to

  • Now, all over network services are reachable for all networks. I can MSTSC and network share etc., but now from, I can't ping (X6 interface)!

  • From machine 10.50.40, I still can't ping, and I can't get to the Internet.


  • If I'm on VLAN1 (default vlan 192.168.2), I can't ping the X6 interface.
  • If I'm on VLAN4 (10.50.40), I can't ping the X0 interface, and VLAN4 can't get to the Internet.

I don't know what's happening. Please help if you have any ideas.


I've changed the default route on the layer-3 switch to the gateway, and now 10.50.40 can get to the Internet, but 192.168.2 can't.

It seems to be a SonicWALL issue.

  • Please include the relevant configurations.
    – Ron Maupin
    Sep 25, 2015 at 13:53
  • I added switch layer 3 conf. Which config would you like for SonicWall? route, interfaces?
    – Alex Lum
    Sep 25, 2015 at 14:41
  • In the test you say that default route is, but in the configuration it is
    – Ron Maupin
    Sep 25, 2015 at 14:45
  • Yes because i made a mistake while i wrote my post. i changed all addresses for the post :)
    – Alex Lum
    Sep 25, 2015 at 14:52
  • Please do no edit the title to include "Solved." Instead, if someone has provided an answer that resolves your question (including yourself), please consider marking it as the accepted answer. This will provide all the indication of the resolution needed. If you do not do so, your question will periodically get refreshed back to the main page, possibly distracting community members from other questions they may be able to help answer for other users. Thank you.
    – YLearn
    Nov 24, 2015 at 16:06

2 Answers 2


If the "Switch layer 3" truly is configured for layer-3, you should not have the same subnet on each side of the switch. A host won't use layer-3 to talk to another device in the same subnet, that is a layer-2 function, and separating a layer-2 domain with layer-3 will cause you no end of problems.

Based on your diagram and comments, you have some serious design and configuration problems.


The hosts on the VLANs should use the VLAN IP address configured on the layer-3 switch as the gateway for the host. This will allow them to connect to other hosts on different VLANs.

The hosts addressed in the subnet of a VLAN need to be connected to a port that is in that VLAN.

The layer-3 switch, as the site router, should have its default route point to the IP address of the device which is directly connected to the Internet if you wan the hosts on the VLANs to access the Internet.

  • Ok thank you very much. I'm pretty new on networking :) if i delete X0 interface, could it work?
    – Alex Lum
    Sep 25, 2015 at 14:11

It works now. I have deleted the configuration from this post.

I have unassigned X6 on sonicwall and simply made a route to join my VLANs. Now all machine can go to Internet and do everything.

My network design was not correct. I thought it could work like my diagram but it doesn't. So now, it works without X6.

  • You should accept an answer. If you don't.this question will keep popping up, looking for an answer.
    – Ron Maupin
    Sep 25, 2015 at 14:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.