Routing issue - LAN can ping gw, gw can ping outside, LAN can't ping outside.

Here's the route table on our gateway

Codes: K - kernel route, C - connected, S - static, R - RIP, O - OSPF, I - ISIS, B - BGP, > - selected route, * - FIB route

S>* 0.0.0.0/0 [1/0] via 203.188.221.97, eth2

C>* 127.0.0.0/8 is directly connected, lo

C>* 169.254.32.196/30 is directly connected, vti0

C>* 169.254.34.212/30 is directly connected, vti1

B>* 172.16.0.0/20 [20/100] via 169.254.34.213, vti1, 1d19h35m

C>* 172.16.32.0/22 is directly connected, eth0

C>* 203.188.221.96/27 is directly connected, eth2

I am able to resolve (uncached) addresses, so DNS is working... I guess that makes sense as the requests are going to the gateway first, not direct to an external DNS server.

Any ideas?

172.16.32.1 - Unifi USG Gateway

172.16.32.2 - Cloudkey

172.16.32.3 - Unifi AP

172.16.32.4 - Unifi AP