Network virtualization doubt on Solaris 11 EA

Hello,
Still trying Solaris 11 EA (b173), now network virtualization.

There are desktop-1 (192.168.0.100/24 on net0) and server-1 (192.168.0.1/24 on net0)
server-1 has zone-1 (192.168.0.10/24 on vnic1 which is over link net0).

From server-1 I can ping both zone-1 and desktop-1.
But from zone-1 can't ping desktop-1 or vice-versa.
Please, what's wrong or missing?

prime@desktop-1:~$ arp -a
Net to Media Table: IPv4
Device   IP Address               Mask      Flags      Phys Addr
------ -------------------- --------------- -------- ---------------
net0   desktop-1            255.255.255.255 SPLA     08:00:27:ba:0f:e1
net0   192.168.0.10         255.255.255.255          02:08:20:8b:93:80 <== OK!
net0   server-1             255.255.255.255          08:00:27:88:19:99
net0   224.0.0.2            255.255.255.255 S        01:00:5e:00:00:02
net0   224.0.0.22           255.255.255.255 S        01:00:5e:00:00:16

root@server-1:~# zonecfg -z z1 info
zonename: z1
zonepath: /zones/z1
brand: solaris