Vlan can only PING oneway

[keithhampshire]

I have two vlans (vlan 1 & 30) on a cisco C2960-L switch. I can PING from vlan 1 to vlan 30 but I can not PING any node on vlan 1 from vlan 30. Both nodes on each vlan can successfully connect to the internet.

My setup from ISP/WAN to the next hop and all network devices: 

ISP>Fortigate 60D>Cisco 1921 router>Cisco C2960-L switch

Is my issue at the Fortinet firewall or the Cisco router?

[Seb Rupik]

Hi there,

As both VLANs can reach the internet it is safe to assume that the routing is correct. The one-way comms suggests an issue with an ACL. If both VLANs are routed on the 1921, please can you share the config with us.

cheers,

Seb.

[keithhampshire]

I figured it out!

The Windows firewall was blocking ICMP. I found this out by disabling the Windows firewall on the node then running the PING command on another machine and got a successful PING.

Thanks