Skip to main content
rabarbar
rabarbar
New Member
March 25, 2016
Question

Fortigate lost 50% packets

  • March 25, 2016
  • 3 replies
  • 7830 views

Hello. I'm newbie with Fortinet, so please forgive me my ignorance :) and my english. My fortigate 200D is connected to ethernet via wan1 to router. Router is from my Internet Provider and i've got external ip. When I ping wan1 from inside network(for example 66.234.234.66) then 100% packets received ok, but when i ping the same address wan1(example 66.234.234.66) from outside my network, 50% lost. I changed to a different port on router my ISP(with the server wich correspond 100% packets). No improvement. Port WAN1 on Fortigate 200D is enabled to 100Mbps/Full Duplex. I take off all Basic and Security Features DNS: 8.8.8.8 and 8.8.4.4. Firmware: v5.2.4 - i don't want a newer one, because is ugly :) Operation mode: NAT Anyone can help me? Look at image.

    3 replies

    Ralph1973
    Ralph1973
    New Member
    March 25, 2016

    Hi, this sounds like a network setting. Check your wan ip and the subnet mask. Also make sure you have a default GW set to the isp router.

     

    Grtz. Ralph

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    March 25, 2016

    Then, I would try a different device like a simple cisco, Linksys router or just a PC assigning the same IP to see if you still lose 50% or packets. At least you can know at that time if it's FG or other part causing the symptom.

    Luiz_Alberto_Camilo
    Luiz_Alberto_Camilo
    Explorer II
    March 25, 2016

    Have you noticed any bandwidth issues ? 

    You might have one way of your traffic saturated maybe ?.. 

    check the output of "diag hardware deviceinfo nic wan1" and check for CRC errors or queues .. 

    rabarbar
    rabarbarAuthor
    New Member
    March 25, 2016
    Thank you for your answers guys. I try yours suggestion on tuesday.
    rabarbar
    rabarbarAuthor
    New Member
    March 31, 2016

    Hi.

    When I try connect via ssh, putty connected to other equipment. This ip address was used by other router in my network(router doesn't ping when i check this address).

    So, this is solution of my problem: change address ip for other free address.

     

    Thank you for yours answers(especially about trying other hardware).It was very helpful and that obvious :)

    Terms & ConditionsAccessibility statement