Skip to main content
Umesh
Explorer II
May 12, 2025
Question

Fortigate ping is not responding if subnet is directly connected

  • May 12, 2025
  • 2 replies
  • 660 views

Dear All,

 

This question is little bit strange but I want to know for My KB. If you see the digram there are three interfaces Port1, Port2 and port3 which are in deffirent subnets. I am able to ping from PC1&2 to my gateway 192.168.1.1 which is absolutely is same subnet but not able to ping 1.1.1.2 and 2.2.2.2 from PC1 and PC2. Why ??

I have configured same thing on Cisco router with three subnet with same subnet, I was able to ping because these are the subnet which directly connected If see the routing table using #show ip route.

 

I though same thing should be in Fortigate Firewall but it did not work for me.

 

Can anyone tell me why I am not able to ping from PC1&PC2 (192.168.1.0/24)  to 1.1.1.2&2.2.2.2.

These subnets are also directly connected to Fortigate Firewall.

 

ping.png

 

 

Thank you for your reply in advance.

 

 

2 replies

sjoshi
Staff
Staff
May 12, 2025

Hi,

 

In fortinet if you want to communicate among the different interface then you need to setup firewall policy.

Please create firewall policy from port3 to port1 and port2 and vice versa and allowed the required subnet.

Refer:-

https://docs.fortinet.com/document/fortigate/7.6.2/administration-guide/656084/firewall-policy#:~:text=The%20firewall%20policy%20is%20the,the%20traffic%20that%20they%20govern.

Thanks, Salon
dingjerry_FTNT
Staff
Staff
May 13, 2025

Hi @Umesh ,

 

1) Since all 3 subnets are connected ones on FGT, so I assume that there is no issue with routing.

 

You can check the routing table on FGT using this CLI command:

 

get router info routing-table all

 

2) You need firewall policies from port3 to port1 and/or port2 for Ping;

 

3) You need to enable Ping administrative access on port1 and port2 as well.

 

I guess you are missing #2 and/or #3.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!