Skip to main content
tom88
New Member
October 22, 2018
Question

Blocked internal traffic

  • October 22, 2018
  • 3 replies
  • 4977 views

Hi all,

 

I'm new to FortiGate, zero experience with FortiOS or other firewall brands. So sorry if this question is a very stupid one. I am trying to setup a FortiGate 60E for external access from VPN to internal network. For testing purposes I want to connect a computer to LAN port 1 and a NAS to LAN port 2. The issue: I cannot access of ping the NAS from my computer. What i have configured:

 

Interfaces: All LAN interfaces are combined into a 'Hardware Switch', DHCP and NAT are enabled.

Static Routes: One configured (0.0.0.0/0.0.0.0 goes to the local gateway from my ISP).

IPv4 Policy: internal > internal: ACCEPT ALL at ALL times.

 

Both the computer and the NAS get a IP address from DHCP and both machines can access the internet without problem. The VPN connection also works (I can logon), but forget that for now. Getting everything working locally is the main issue at the moment (this VPN has, off course, some additional policies in place).

 

When I read the internet topic's they say that using a hardware switch should cover everything. But I think I am overlooking something. Thank you in advance.

 

 

Tom

 

 

    3 replies

    makco10
    Explorer II
    October 22, 2018

    Hello,

     

    When you do a tracert from your pc to the NAS, what is the result?

     

    Regards.

    tom88
    tom88Author
    New Member
    October 28, 2018

    Hi makco10,

    Thank you for the reply. A friend also gave me some tips and I found the solution (for all others in need):

    I needed to delete the fysical interfaces from the 'Hardware Switch' and create a 'Software Switch'. I thought I already tried that, but not good enough, I guess...

     

    Thank you for your reply!

    makco10
    Explorer II
    October 29, 2018

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!