Problem with access between LAN and LAN_VLAN with IPS

[olest]

When I enable IPS on LAN interface and use "Promiscuous mode" I cannot access my Synology NAS at LAN_VLAN1200 from a PC at LAN.

[russella]

Try the following: Goto Interfaces->Settings and set Hardware CRC, Hardware TSO and Hardware LRO all to Disabled (i.e. Checked) and set VLAN Hardware Filtering to Disable VLAN Hardware Filtering

[ruggerio]

do not use promiscuous. yor traffic will get inspected on the real portport.

i tried that too, but then remarked, that it got inspected on lan instead of vlan-interfaces.

[olest]

Yes "Promiscuous mode" is the problem.
Should I still only select LAN interface in IPS settings to get IPS on VLAN interfaces?

Tried to disable VLAN Hardware filtering also but no change.

[ruggerio]

your crossed answer was the right. disable promiscuous mode and the vlan interfaces.

check then, usually its been checked on the physical interface, nonetheless it will show up with your vlanmy config works like this.