Crazy fortigate forwarding behavior

Hi,

The configuration on the device is not understood. Please gather the output of below commands for checking the behavior,

show sys settings

show sys global

show firewall ippool

show firewall vip

show router policy

get router info routing-table all

And you may run debug flow as detailed here Troubleshooting Tip: First steps to troubleshoot c... - Fortinet Community to understand the behavior better.

Best regards,

Jin

Hi Edison,

Thank you for the query!

From the query, I understand you are not able to ping the firewall IP from one specific user machine. 

Could you please confirm if you are seeing 10.10.11.0/24 route on the Internal interface.

Please share the output of the command:
get router info routing-table details 10.10.11.152

Also please share the below debugs:

di de reset

di de flow filter addr 10.10.11.152

di de flow filter proto 1

di de fl sho ip en

di de fl trace start 1000

di de en

Once you run the above commands in firewall cli, please try to ping firewall ip from 10.10.11.152, once it is finished, please stop the debug using:

di de di

di de reset

Hello 

i have the same Issue with my fortigate 

8:38:58.553652 TRANSPORT in 10.136.100.1 -> 10.143.155.1: icmp: echo request
2024-05-24 18:38:58.553764 root out 10.143.155.1 -> 10.136.100.1: icmp: echo reply
2024-05-24 18:38:58.553771 root in 10.143.155.1 -> 10.136.100.1: icmp: echo reply

 did you find solution for that ? thank you

Anyone figure out what cause on this root response? - Below solve my issue.

set arp-reply disable