Cannot ping RADUIS server but I can ping internet. i.e., 8.8.8.8

6 replies
2943 views

We have a #FortiGate80CM and I could ping from the #guest_wifi interface all the net except the radius server Wich used for guest to authenticate.

Any ideas what may be caused the issue I created a static route to the radius subnet but nothing?

Thanks in advance,

FortiGate

abelio

SuperUser

Just maybe radius server doesn't reply ping requests

ICMP ping is not required for authentication through radius protocol.

A static route may not be enough.

RFAHMIAuthor

New Member

Thanks for your response, actually the RADUIS serv can respond to ICMP if ICMP works then authenticate will work as well, the weird thing is I can ping all the net except the radius subnet which is third-party server.

alif

Staff

it could be a routing issue.

Please run debugs on Fortigate for further investigation.

diagnose debug reset
diagnose debug flow filter addr <Radius_IP>
diagnose debug flow filter proto 1
diagnose debug console timestamp enable
diagnose debug flow trace start 1000
diagnose debug enable

Now initiate ICMP traffic to Radius server. After performing the test, you can stop debugging;
diagnose debug disable
diagnose debug reset

A

Anonymous_User

Esteemed Contributor III

HI @RFAHMI ,

Its the best if you can provide simple network diagram for this issue.

By default, windows firewall block ping. You may consider to disable Windows firewall on the radius server 1st.

From Guest_wifi interface, you able to ping all the net, but not Radius server.
Is the Radius server sit on different network? Or same network?
Are you able to ping the Radius server from same network?

This information will help to troubleshoot further.

Sign up

Login with SSO

Login to the community

Login with SSO