Multiple virtual interfaces

Hi there!

maybe is a dumb comment, but can you double check your route?

It should look something like this:

And then, what I would do is this:

1) Check in your internal interface if you any traffic with this:

diagnose sniffer packet internal

If you see a packet like this: 

0.553565 802.1Q vlan#100 P0

1.553430 802.1Q vlan#100P0

That would mean that your Switch and VM host configuration is right, otherwise is not, so you will have to check that.

2) Assuming that you saw packets with the VLAN tag, now you have to do is analysis that traffic, for instance you can do a ping to a google DNS from a host in VLAN 100:

diagnose sniffer packet myvlan interface "host 192.168.100.10 and icmp"

0.822234 192.168.100.10 -> 8.8.8.8: icmp: echo request

3) Finally, you can debug this traffic to see what's going on:

diagnose debug flow filter saddr 192.168.100.10

diagnose debug flow filter daddr 8.8.8.8

diagnose debug flow filter proto 1

diagnose debug flow show console enable

diagnose debug flow trace start 100

diagnose debug enable

Then you should look the output and check if you see something like this:

"iprope_in_check() check failed, drop"  or "Denied by forward policy check"  or "reverse path check fail, drop"

Hope it helps!