IP is not pingable from switch but from outside

[Raghav2312]

Hello Folks,

we are using Fortinet firewall and cisco core switch and access switches. VLANs & DHCP are configured on the core switch and access ports are configured on the access switch. Right now the user is connected to an access port that is getting IP from DHCP and using the internet. ISSUE is - the user is pingable from core switch but not from firewall and access switch( where that connected).

please guide and thanks in advance.

[Georg Pauwen]

Hello,

post a topology diagram of your network showing how your devices are connected, including the IP addresses of the 'problem' devices involved...

[Kasun Bandara]

Hi,

1. if your DHCP server in Core switch and gateways are configured on core switch, you may need to add default route at core switch towards firewall. also firewall need to configure with routing for reply traffic towards core switch. and check VLANs between firewall and core switch. 

2. if your DHCP and gateways are configured on firewall, make sure you are using trunk between firewall and core switch and access switches are configured with correct VLANs.

information you provided are not enough to get good idea about the topology and need more details to identify exact issues.

Good luck

Rate and up vote if this helps with your concern

KB