FortiGate: pinging problem

Forum|Forum|5 years ago
May 31, 2021
3 replies
3907 views

Hi all,

please i have a fortigate i want to pinging through two ports but the ping always send from one port

if there are anyone here please know how i could push the ping to sended via the port ?!

config bellow:

edit "port3" set vdom "root" set ip 10.254.10.101 255.255.254.0 set allowaccess ping https ssh http telnet set type physical set snmp-index 3 next edit "port4" set vdom "root" set ip 10.254.20.102 255.255.252.0 set allowaccess ping https ssh http telnet set type physical set snmp-index 4 next

config router static edit 3 set gateway 10.254.10.1

set dst 0.0.0.0/0 set device "port3" next edit 4 set gateway 10.254.20.2

set dst 0.0.0.0/0 set device "port4" next end

execute traceroute 10.254.151.1 (PS: this one is correct) traceroute to 10.254.151.1 (10.254.151.1), 32 hops max, 3 probe packets per hop, 84 byte packets 1 10.254.10.1 7.385 ms 4.384 ms 3.335 ms 2 10.254.111.11 11.473 ms 5.004 ms 5.487 ms 3 10.254.112.21 14.326 ms 15.581 ms 14.088 ms 4 10.254.151.51 20.117 ms 10.824 ms 10.623 ms 5 10.254.151.1 12.562 ms 15.848 ms 12.937 ms

execute traceroute 10.254.252.2 traceroute to 10.254.252.2 (10.254.252.2), 32 hops max, 3 probe packets per hop, 84 byte packets 1 10.254.10.1 4.201 ms 3.177 ms 7.665 ms ( this one is wrong must be 10.254.20.2) 2 10.254.10.1 5.056 ms !H 3.137 ms !H *

FortiGate

Toshi_Esumi

SuperUser

Then, you need to have a specific route for the subnet including 10.254.252.2 toward port4. Otherwise the FGT just pick either interface based on two default routes with the same cost (ECMP).