Recently added the switch to an existing 192.168.2 network.
I have configured the switch to have multiple subnets 10.n.1.0/24 with one gateway port on the 192.168.2 network and a default route to the LAN IP of a SonicWall firewall.
On the SonicWall I added a static route from Any to 10.0.0.0/255.0.0.0 pointing to the switch gateway port IP. All of the subnets can see each other and the Internet, and I can connect from outside via the SonicWall VPN to a computer on one of the L3 subnets.
I have a site-site VPN on the SonicWall linking to a 192.168.3 subnet at the other end. Hosts on the 192.168.2 subnet can see it but none of the 10.n subnets can.
because you probably have only 192..x to ip binding when 10. try to connect even static route may allow with one side of the network , table see as coming from other IP in the tunnel and can not trust it .
