Network Devices VLAN

Hi all,
I would be create a VLAN (for example VLAN 4) where to manage all my network devices.
My Firewall have the IP 192.168.11.253 and have VLANs below:

VLAN1 default 192.168.11.x
VLAN4 Network Devices 192.168.4.x
VLAN110 Guest 192.168.110.x
VLAN120 Lab 192.168.120.x

I create the "Policy Control" rule to allow the services i need to connect from the LAN1 to VLAN4.
The Primary Switch is configured with all VLANs, have the port 1 connected with Firewall in Trunk and have IP 192.168.11.1.
Connected with the Primary switch there is a Secondary switch with the same configuration and IP 192.168.11.2.
Primary and secondary switch are connected with trunk ports.
If I change the IP of the Secondary switch in 192.168.4.2 (Gateway 192.168.4.253) I can ping it and have access to Web GUI.
If I change the IP of the Primary switch i can't ping it and I can't access to Web GUI.
Ping and access to Web GUI of the Secondary switch still alive.

What's wrong?
It's possible to do what I want?
I need to create some sort of Policy Route?

Thanks for all.

Paolo Fracas