Punching a whole in DMZ

[basball]

I have a web server configured as a dmz on a vlan, hence it's own unique subnet.
Everything works fine, however, I want to be able to communicate with a device that is local to my network, which sits on a different subnet.

my setup looks like this:
web server (192.168.4.4)
x0:v4
dmz
192.168.4.2
255.255.255.0

The device I need to talk with that is internal is:
192.168.0.27 (IP of device)
255.255.255.0
192.168.0.2 (actual gateway to sonic router)

Any thoughts on how I punch a whole.

Thanks, aj.

 

[joepc]

The VLAN should have its own zone so you need to adjust the firewall rules between that zone and the LAN zone. Assuming the Sonicwall is the gateway for each subnet.