The site and a Primary and Secondary controller and the secondary controller is on a different subnet if a different building and the ports won't answer when called from the second location.
The Networks in the MSL has been edited to add the subnets. There are no firewall between locations.