Troubleshooting Tip: Kernel route is not sync across the FPM on 7000 appliance

Description

This article describes an issue when the kernel route is not synced across the FPM on 7000 appliance.

Scope

FortiGate.

Solution

When running a traffic test, the debug flow observing the traffic is dropped by a 'reverse path check fail, drop' on a specific FPM.

All slots are shown as synced with the command below:

# diagnose load-balance status

Compare the kernel route with another FPM using the following command:

# get router info kernel

The route output is different from a normal FPM to a problematic FPM.

Perform the following command on the slot that has the missing routes to manually trigger a manual route redownload:

# diagnose test application chlbd 3