Internet works from switch, No internet on system.

[Rajan R]

Hello, 

So we are trying to switch to new firewall hardware. Latest software. Same configs. No changes on our core. New firewall with test bed core switch works fine. So we try to go Live. Swapped cables, cleared arp. If I ping to internet from our core thru source vlans it works, but not from systems on the same vlan.

Any clues? Is this something to do with the firewall or the switch? 

Thanks

[marce1000]

 - Check the firewall logs for starters, especially blocked or dropped traffic, but also rule-matching for supposedly pass-thru traffic should be sanity-verified. If a rule should match and allow, then check logs and verify

 M.

[Rajan R]

Thanks for your response.

There is nothing on the firewall logs. The same fw config works when i connect it a switch with same config as the core switch. Everything works fine there.

[Georg Pauwen]

Hello,

which firewall do you have, an ASA ? Post the running configuration...

[Rajan R]

It is a Fortigate. From every vlan interface on the switch the internet is reachable. "ping 8.8.8.8 source vlan xx" From the systems, nothing.

Thanks

Put the ASA to rest :(

[Georg Pauwen]

What can you ping from the Fortigate, the Vlan interfaces (I assume) and not the clients ? Post the running config of the switch, as well as the config of the Fortigate...

[Rajan R]

This was a bug in the 4507 Switch. Had to add the vlan id along with the default route.

ip route 0.0.0.0 0.0.0.0 x.x.x.x vlan xx