Fortigate Policy Based Routing have big problem

Question

I think Fortigate Policy based routing work but it should effect network packet because of that other router can't understand or send that packet to anyware. If you look my test toplogy I have two fortigate device and I just want send some request to SecondGW via FirstGw also FirstGW send packet to secondGW but secondGW drop or can't understand that packet if I use Policy Based Routing. Another way I use route system and sedn all traffic to second GW and vala working so my opinion Fortigate Policy Based Routing not work if any one want tray same system I will upload my config to internet and download link past here.

I hope Fortigate fix this problem in feature.

Policy Based Routing test

http://s8.dosya.tc/server2/sv28ym/PBR.zip.html

Routing test

http://s8.dosya.tc/server2/ymczh9/DefaultRouter.zip.html

Ralph1973 · Answer

HelloIt is not entirely clear for me. As I understand it, a client sends a packet to GW1 and GW1 needs to forward to GW2, which forwards further? The first things that occur to me:What traffic is forwarded? Is it natted from the outside ip of GW1 and then enters GW2? Or is the packet rerouted on the inside to be send out of the other Gateway?My experience with (policy based) routing configuration is that you always need to check if there is a path back to the originator. So routing for returning traffic should be in place.There might be anti spoofing issues (cannot determine now), you can check your log messages or do a debug flow filter trace.I think you need to supply more information. Kind regards,Ralph WillemsenArnhem, Netherlands

Sign up

Login with SSO

Login to the community

Login with SSO