Skip to main content
jpapic
Explorer
March 6, 2026
Question

FortiGate FortiSwitch (FortiLink): LAN works but no internet via MPLS SD-WAN

  • March 6, 2026
  • 2 replies
  • 227 views

Hello,

This is my current topology:

FortiGate → FortiSwitch (FortiLink) with the following VLANs:

  • Data

  • Voice

The FortiGate is also configured with SD-WAN using two MPLS interfaces.

The issue I'm seeing is the following:

When I connect a notebook to a port on the FortiSwitch, I can access all LAN devices without any problem. However, when I try to access the internet, for example by doing a ping, the traffic does not go beyond the Data VLAN gateway IP.

Important detail:
Both LAN and internet traffic should exit through the same MPLS path.

To validate the issue, I reverted the MPLS interfaces back to the Huawei device, and in that scenario the customer has both LAN and internet connectivity working correctly.

The configuration on the FortiGate is fairly straightforward, mainly BGP with SD-WAN, nothing unusual.

Has anyone seen a similar behavior or have any ideas on what could be causing this?

Thanks in advance.


Si querés, también te puedo armar una

2 replies

AEK
SuperUser
SuperUser
March 6, 2026

Hi

Check SNAT, firewall policy and SD-WAN rules.

If they seem fine then run diag debug flow to see what FG is doing with the traffic.

diag debug flow filter ....
diag debug console timestamp enable
diag debug flow show iprope enable
diag debug flow show function-name enable
diag debug flow trace start 100
diag debug enable

Hope it helps.

AEK
jpapic
jpapicAuthor
Explorer
March 6, 2026

Thanks,, i will check it.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!