Ping fails between machines on same network

ping

config
internet -> Arris CM/WAP stock -> Netgear 2000 DD-Wrt v24 (wired connect to CM)

All machines have internet access

Netgear 192.160.0.2
CM 192.168.0.1
machine 1 – wired to netgear 192.168.0.11
machine 2 – wired to netgear 192.168.0.23
machine 3 – wireless to CM 192.168.0.15

Machine 1 can ping CM, Netgear, and Machine 3, but not machine 2
Machine 2 can ping CM, Netgear and Machine 3, but not machine 1

Obviously something in the Netgear box is working, but I cannot find setting
DHCP is off, its set to router function , wan port is off, ap isolation is off

If you can give me some idea I can run down the setting , but I just don't know what is going on, never seen two machines on the same router not be able to ping each other.

Best Answer

Thank you for the direction, I am going to have to come up to speed on a few things, to work on the advice, but for now

The SPI firewall on DD-WRT machine is disabled There are no Security Policies in place on the DD-WRT router (in the Security Tab) DMZ, QOS are disabled WAN is Disabled DHCP is disabled Advanced Routing is set to Router Mode

The Firewall and all other security on the Arris CM is off (for testing) RoutedwithNAT is on in LAN Settings DHCP pool starts at x.x.x.05

One other fact I discovered this afternoon is that though DD-WRT has the option to make the uplink port just a regular port when DHCP and WAN are disabled - and according to the wiki on WRT the connection should be lan-lan port, NOT uplink port, I only get internet on the M1 and M2 when the cable from the CM is plugged into the uplink port, not any other port, even though the uplink port is supposed to be just a regular port. So its as if the Netgear is not taking the WRT setting, or the Arris won't recognize a connection to any other port.

Even stranger is WIRELESS connections (droid phone) through the netgear router (diff SSID than Arris CM) will ping through to M2 and it has internet - so its just the two wired machines that cannot see each other;

For completeness M1 and M2 are both running Lubuntu 12.10 and have no security/firewall policies that I know of turned on. I am going to revisit local firewall settings as I can't see anything else in WRT that can be changed. I appreciate the help, the best I have gotten at DD-WRT is "it should work if you followed the tutorial"