If a firewall is configured with different VLANs, how could an attacker perform an attack over a different VLAN. I see a lot of information on scanning, exploiting, and other attacking methods using a device's IP address. Most of this information is assuming the attacker is on the same VLAN as the target (for simplicity sake).
For example, I am the attacker and my IP address is
192.168.1.10. My target's IP address is
192.168.2.10. I want to run an exploit against my target, yet I can't even ping the target (Destination Host Unreachable).
I understand this is because the firewall on the network divides up the network into virtual LANs and everything routed is through the firewall. Therefor, if one device tries talking to a different device on a separate VLAN, the router says "I don't know what you're talking about" (correct me if I'm wrong here).
Is it possible to attack a target from a different VLAN, and if so, what are some methods used? I am having a hard time figuring out different attacking methods when a simple ping reports an unreachable destination.