Same VLAN; one host able to ping; one can't ping back

[Martin03960]

Hello everyone,

Having an issue with my small network setup. For a router I have a RV340 and two Catalyst 3850s. The 340 currently has two VLANs, each on one LAN interface, VLAN one being 192.168.1.253/24 (192.168.1.0/24 network gateway); VLAN 2 being 164.236.135.100/24 (164.236.135.0/24 network gateway). 

Each 3850 has g1/0/1 set to be the next IP up logically as a VLAN interface, 164 switch has vlan 2 set to 164.236.135.101/24 and trunking to the router. I have two Windows laptops wired to ports g1/0/2 and g1/0/3 with 164.236.135.3 and .4 ip addresses respectively and set to access VLAN 2 on their 3850. 

This is where my issue lays. The .4 laptop can ping to the gateway, the VLAN interface on the switch and the .3 laptop. When the .3 laptop pings to the .4 I get no response, the same from the switch. ARP resolves and it receives the MAC address for the .4 laptop but with no joy. Switch likewise cannot ping the .4 laptop while consoled into the switch. If anyone can provide guidance or needs further info please let me know. 

[Richard Burts · Accepted solution]

There is much that we do not know about this situation. But based on the description given so far my best guess is that the host that you can not ping may have its firewall enabled and the firewall is not permitting the ping. Can you check that PC, turn off its firewall, and test again?

[Martin03960]

While I disabled Windows Defender from the task bar, the OS did NOT turn off the Public firewall. Once I turned off all three of the Windows Defender firewalls I was able to ping, and copy tftp (which was my goal) and ping across both vlans/subnets. Thanks for the guidance!

[Richard Burts]

Thanks for the update. Glad that you were able to resolve the problem and that our suggestions were helpful. Thank you for marking this question as solved. This will help other participants in the community to identify discussions which have helpful information. This community is an excellent place to ask questions and to learn about networking. I hope to see you continue to be active in the community.

[balaji.bandi]

first place i start wit windows FW to disable. since you able to ping from laptop to Gateway ( and gateway to Laptop not working)

can proviode from switch show ip arp and show ip route.

[Georg Pauwen]

Hello,

are the 3850s configured as layer 2 or layer 3 switches ? If they are layer 2 switches, make sure the gateway of the laptops is the IP address of the RV340, and not that of the 3850 switch(es)...