martinmarusinec

Well, did not help. I have suspicion there is a problem with how the bridge handles tagging...

To amend this, did not help. If I remove VLANs from the equation, the bridge works. With VLANs, not at all ....

I have the "internal" interface types, however switching to general did not help either.

This is my config. I see you use general interfaces, while I have internal. Could it be the case?

gateway is the IP address assigned to the bridge br2 interface. so technically both segments see the router, which imho implies the LAG and VLAN2 works. I have no idea what should I try next....

on legacy segment I can ping hosts from each other and also a gateway, on the new segment on new switch I have only singe test device, but I can ping the gateway

It makes no difference whether I set the same zone on bridge, vlan2 and Lag. However I think (may be I am wrong) that zones specifies which firewall rules should be applied, and I even do not have ARP populated. Could be the problem lies in tagging? vlan2 is obviously tagged as VLAN2, while the ge10 port has no VLAN…

Hello, I do not have problem with routing, I have problem that my hosts from one segment in the same subnet do not see hosts on other segment in same subnet. Both segments are connected with bridge interface, while first segment is connected physically to one port, and second segment is connected with VLAN interface on top…