By default, the vSAN VMkernel adapter on each VxRail node is set to use the same gateway as the External Management network. The gateway must be changed to the vSAN network gateway, 192.168.13.254 in this example, to communicate with the witness host.
Change the vSAN gateway on all VxRail nodes to reach the witness host vSAN network as follows: