assuming the route is there, I would try changing MTU as one last test. Then if that is not working, firewall is the only possibility left