topic Not able to Ping in General Topics

Not able to Ping

Swetang — Wed, 19 Aug 2020 08:37:44 GMT

I have l3 switch , new vlan is created and its default gateway is PA FW..A machine when connected to trust interface eth1/2 is able to access the internet...but when machines are connected to switch with trust IP range,internet is not working.

My machines are not able to access internet,but when i connect a single machine to FW Trust Lan interface internet is working.

Default route is given on FW is 0.0.0.0/0 and next hop is ISP Ip(182.71.x.x)..kindly tell me what need to done for machine to get internet.

Re: Not able to Ping

reaper — Wed, 19 Aug 2020 09:54:39 GMT

i would guess your switch port is set to trunk mode or is otherwise tagging it's packets with a VLAN tag which the firewall will ignore if you did not create a tagged subinterface

the solution is to create a tagged sub interface on the firewall that matches the .1q tag and hsas the IP and zone configuration

Re: Not able to Ping

bborges — Wed, 19 Aug 2020 18:10:23 GMT

Firewall and switch interface vlan are in the same net? If not, try putting a static route on firewall
Destination -> Desktop network -> next-hop interface vlan of the switch.