Not able to Ping

[Swetang]

I have l3 switch , new vlan is created and its default gateway is PA FW..A machine when connected to trust interface eth1/2 is able to access the internet...but when machines are connected to switch with trust IP range,internet is not working.

My machines are not able to access internet,but when i connect a single machine to FW Trust Lan interface internet is working.

Default route is given on FW is 0.0.0.0/0 and next hop is ISP Ip(182.71.x.x)..kindly tell me what need to done for machine to get internet.

[reaper]

i would guess your switch port is set to trunk mode or is otherwise tagging it's packets with a VLAN tag which the firewall will ignore if you did not create a tagged subinterface

the solution is to create a tagged sub interface on the firewall that matches the .1q tag and hsas the IP and zone configuration

[bborges]

Firewall and switch interface vlan are in the same net? If not, try putting a static route on firewall
Destination -> Desktop network -> next-hop interface vlan of the switch.