Two 2960's Ping each other, but clients connected can only see switch

[itm-network-support]

I have 2 Cisco 2960's

There is no router (default-gateway) and there will never be. These two switch will connect our security networks between buildings.

I have a trunk port that connects the switches

The switches can ping each other just fine.

Switch1 has 192.168.0.2 255.255.255.0 on vlan1
Switch2 has 192.168.0.3 255.255.255.0 on vlan1

Client1 connected to Swtich1 192.168.0.4 255.255.255.0
Client2 connected to Switch2 192.168.0.5 255.255.255.0

Both clients can ping both switches.

Switches can't ping either client

Clients can't ping each other.

Firewall is NOT on. NOT on.

[paul driver · Accepted solution]

Hello

turn of the software firewall of the clients or allow Icmp in the fw settings

Res

Paul

[whiteside998 · Accepted solution]

Hi itm-network-support

when you say "Firewall is NOT on. NOT on." are you refering to the windows software firewall if not

Paul Driver is right windows firewall by default blocks ICMP traffic and has 3 profiles from memory and when testing equipment sometimes you may have it off for say domain but private network may still be active.

windows firewall profiles

http://msdn.microsoft.com/en-us/library/windows/desktop/bb736287(v=vs.85).aspx

disabling and enabling ICMP Traffic

http://technet.microsoft.com/en-us/library/cc786463(v=ws.10).aspx

hopefully this helps :) but if not let me know

[itm-network-support]

Well you guys were right.

It was a toughy. I was unaware that our Trend Micro had settings built in that when being connected to certain IP scopes, that ICMP blocking would apply.

It was for laptops that when outside of out network would connecting to startbucks wireless would be more secure, but when in our building would be less restrictive.

I am setting up a stand alone network for security and was using a scope that was out of range.

Thanks for the help,