Istio gateway problem

Hi Team,

I am struggling to find out the cause as why I unable to access kiali from my jumpbox.
We have a private hub spoke model setup … In spoke, 3 node cluster is installed … I have installed istio gateway and kiali . I am able to curl kiali service from (redhat) master and worker nodes but cannot from jumpbox and any windows machine in same internal subnet ,cannot curl or ping the gateway (attached internal ip using metal lb).

I can ping to master and worker nodes from the jumpbox but unable to ping external ip.
getting response .

[Admin@master ~]$ curl -k https://kiali.testdomain.local/kiali
<!doctype html>Kiali@font-face{font-family:pficon;src:url(‘./pficon.woff2’) format(‘woff2’)}You need to enable JavaScript to run this app.

[Admin@master ~]$

[Admin@kube-node1 ~]$ curl -k https://kiali.testdomain.local/kiali
<!doctype html>Kiali@font-face{font-family:pficon;src:url(‘./pficon.woff2’) format(‘woff2’)}You need to enable JavaScript to run this app.

[Admin@kube-node1 ~]$


windows -jumpbox (same subnet)

C:\Users\Admin>curl -k https://10.254.252.20/kiali
curl: (28) Failed to connect to 10.254.252.20 port 443 after 20996 ms: Timed out

C:\Users\Admin>curl -k https://kiali.testdomain.local/kiali
curl: (28) Failed to connect to kiali.testdomain.local port 443 after 21042 ms: Timed out

internal windows server is attached to domain and can ping domain(testdomain.local) …

Any suggestion would be really appreciated.

Thanks,
gaurav