Can't ping gateway any longer

So our network has been running as is for several years without any problems until I tried to install a new switch the other day. So the other day I configured a new Cisco 2960x then added it to the network. When I first added the switch I had made a mistake and there was a IP conflict so I changed the IP and all was well, so I thought. The next morning I noticed that my VMWARE cluster was giving me an error for not being able to reach it's isolation address. I know it uses the default firewall/gateway(ICMP is allowed) so I tried to ping from the ESXi server but I was not able to . I then tried to ping from my system and I was able to ping the gateway. All of these systems are not the same network but different switches so I tried another system on my switch and I could not ping. I also tried from all of the switches with no luck.

So at this point I am unable to ping the gateway from anything but my system and the only difference is I am using a static address but so are the switches. The strange part is I would have never noticed this if it wasn't for VMWARE as everything is working normally and traffic is being routed through the firewall/gateway. I looked at the ARP tables on the systems and switches and the MAC is correct on all for the gateway. I also did a scan for duplicate address but none were found. I even rebooted the switches with no luck so I am a loss at the moment. I am not a network engineer but I get to play one at work from time to time so any help is appreciated.

Thank you
shawn muzzeySystems AdminAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

atlas_shudderedSr. Network EngineerCommented:
Was the VMware cluster moved to the new switch?
shawn muzzeySystems AdminAuthor Commented:
No  nothing has changed other than the addition of a new switch that I have since removed trying to resolve this. Also I can't ping from any other system on the same network other than my own.
atlas_shudderedSr. Network EngineerCommented:
I guess a few questions then.

1.  What type of device is at your gateway?  Firewall, router, switch, etc.?
2.  Can you ping inside the networks?  In other words, can you ping from the say the cluster to your local PC, from a file server to an AD server?
3.  Can you ping from your gateway to anything in the local network other than your PC?
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

shawn muzzeySystems AdminAuthor Commented:
The gateway is a firewall.
I can ping inside the network including from the switch to my pc, from cluster to my pc. domain/servers to my pc going both ways.
From the gateway/firewall I can ping my pc, ESXi servers, switches appears to be everywhere.
atlas_shudderedSr. Network EngineerCommented:
Okay, can you check your firewall logs while attempting to ping from one of the affected devices to see if those pings are being blocked?

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
shawn muzzeySystems AdminAuthor Commented:
Ok so after checking the logs I didn't see anything being blocked for ping. The firewall is a fortinet so I did a search to be sure I was looking at the correct logs and stumbled on a thread where a user had to use a workaround because he was not able to ping. Apparently Fortinet blocks ping if you set Admin to restrict login to trusted host even if you allow ping on the interface.

 I removed an old user the other day and the rest of the users restrict access to the internal network so this caused any internal pings to fail

Thank you for the help.
atlas_shudderedSr. Network EngineerCommented:
No problem   Good luck with the new switch.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Switches / Hubs

From novice to tech pro — start learning today.