Closed Network Routing Problem (Firewall subinterface vs VLAN interface)