I have resolved my issue. It was not ACL's but in fact it was my vSwitch that was the issue. I found this on VMWare's website. Its not really a Dell switch issue however I will post this here in case it helps someone out there in the community. When I added my vSwitch I had assigned the vlan ID as 30 however.... External Switch Tagging (EST) so i changed the vlan ID on the new DMZ vSwitch to 0 and VOILA, it pings. Case closed.
Hello, I am hoping someone can please help me. I am trying to setup a DMZ network. My setup is as follows, 2 x clustered fortigate 300e firewalls 2 x stacked Dell core switches S4048-ON in Layer 2 mode 2 x VMWare 6.7 ESXi hosts I have created the DMZ zone on the fortigates and set the IP to 192.168.30.1 on this interface on port 6. I have created vlan 30 on the Dell switches.  I have created port-channel 30 which is connected directly to my 2 x ESXi hosts. I have created a vSwitch in vCenter for the port-channel 30 uplinks and I have assigned vlan 30 to this vSwitch. The VM I am testing with has this new vSwitch added and I have statically set the IP on this to 192.168.30.10/24 with default gateway of 192.168.30.1 (which is the interface on port 6 on the fortigate firewall) I am thinking that the issue is on the switch and before I travel to the datacentre to break the port-channel I thought I would post here on this community in case I have missed something. Any help from anyone would be greatly appreciated. Here is how I have setup my ports, port-channel and vlan on the switch. interface Vlan 30description *** uplinks to ESXi's to vmnic0 ***no ip addresstagged TenGigabitEthernet 1/17tagged TenGigabitEthernet 2/17tagged Port-channel 30no shutdown interface Port-channel 30description "ESXI-01 and ESXI-02 Port Channel for the DMZ network"no ip addressportmode hybridswitchportno shutdown interface TenGigabitEthernet 1/17description *** vlan 30 DMZ uplink to esxi-01 on vmnic0 ***no ip addressportmode hybridswitchportno shutdown interface TenGigabitEthernet 1/18description *** uplink to Fortigate port 6 ***no ip addressportmode hybridswitchportno shutdown Points to add. The ESXi hosts are directly connected to the dell core switches. The Dell core switches are directly connected to the fortigate firewalls.  I have inherited this environment. I have setup VMWare environments in the past and connected them to layer 3 Dell switches and never had a problem. I would set an IP on the vlan, connect my hosts to this and then add a static route to point the vlan to the interface on the firewall port that is connected too. This is my first attempt at a config using layer 2.  Port information for TE1/17 and TE2/17 which is my uplinks from the Dell switches to my 2 x ESXi hosts, they are tagged in another vlan (vlan 100) As it stands when I try to ping 192.168.30.1 from my VM which has IP 192.168.30.10 it times out. I have enabled ping on the DMZ zone I setup on the fortigates. Thank you for any assistance.  
Setup a DMZ and cannot ping default gateway and Layer 2 switch