In the left navigation pane on the VPC console, choose Access Control> Network ACLs and check whether the subnet allows traffic.