vlan – Routing packages on the identical subnet phase

A community topology query.

I’ve a router working OpenWrt, with a number of VLANs (all working appropriately) with 192.168.X.2 addresses, with X being a subnet corresponding to every VLAN. There may be one DHCP server for every vary, on the identical machine.

Then again, I’ve a firewall, which is presently an OpenWrt, nevertheless it could possibly be one other one (OPNsense, pfSense…) with 192.168.X.1 addresses, and with a WAN interface (i.e, 11.22.33.44) which connects to the web by PPPoE, additionally working positive.

One thing like this:

                       ---------
                       |  ISP  |
                       ---------                                 
                           |       11.22.33.44 (PPPoe,WAN)       
                     ------------- 192.168.10.1                  
                     | FIREWALL  | 192.168.11.1                  
                     ------------  192.168.12.1                  
                           |                                     
                    --------------  192.168.10.2                  
                    |   ROUTER   |  192.168.11.2                  
                    --------------  192.168.12.2                  
                     |    |    "https://networkengineering.stackexchange.com/"                                      
              _______|    |     |_______                          
             |            |             |                         
         VLAN 10        VLAN 11       VLAN 12                      
   192.168.10.0/24  192.168.11.0/24  192.168.12.0/24               

I need the router to handle the inter-VLAN pass-through, and the firewall to deal with the web connection, port forwards between WAN and LAN and, ultimately, the packet filtering. If I set the firewall because the gateway (192.168.X.1) within the shopper configuration, they’ve entry to the web, however there isn’t a packet passing between VLANs. If I set the router because the gateway (192.168.X.2), it does cross by between VLANs, however there isn’t a web connection.

I’ve tried setting static routes on the router in order that the packets observe by to the firewall, however I’ve not been capable of get it to work. I’ve additionally tried routing tables and guidelines, as proven right here and right here for instance, however they do not work both.

I’ve come to suppose that what I am attempting is not doable, for the reason that transfer from 192.168.X.2 to 192.168.X.1 is just not achieved between networks, however is a hop inside the identical community, however I do know of first-hand instances the place packets are handed from one machine to a different on this approach.

What am I doing incorrect? Ought to I’ve to outline a brand new subnet, 192.168.1.0/24, for instance between the router and the firewall to make sure appropriate routing?

Thanks upfront