Nothing like using a big club on it! 
If you can’t ping by IP, Sonny may be right on the routing nightmare idea.
Could you shoot us some “route PRINT” output and “tracert -d 192.168.2.1” and “tracert -d 192.168.2.21” and “tracert -d 192.168.2.3” on every machine.