Hi I needed to add secondary IP address to my internal LAN, Which I was able to do with the shellcmd
in the config.xml.  If I do a ifconfig from the exec.php I see all of the IP addresses and I can
ping those addresses from the default lan.  The problem lies in vreating the rules.  No matter what
I do everything is denied coming from the networks of the subinterfaces.  IE.  The primary network
is 192.168.1.1 and I have a rule 'LAN all prot. 192.168.1.0/24 to any allow' and that works fine.
Now if I add the rule for the secondary network 'LAN all 172.40.25.0/24 to any' the firewall blocks
everything coming from 172.40.25.0/24.