Skip to main content
sonydarrel
New Member
April 14, 2017
Question

Fortigate traffic passing

  • April 14, 2017
  • 2 replies
  • 4655 views

Dears

I have a ESXi host  connected on the cisco switch whose default gateway is on fortigate firewall and the Policy i have on fortigate is permit ip any any, the ESXi host is pingable from other subnets except one subnet 172.20.3.X below are the traces collected from fortigate, from my diagnosis i can see that the server is not responding to the ping packet please confirm to me.

 

2017-04-13 16:35:32 id=20085 trace_id=5 func=print_pkt_detail line=4420 msg="vd-root received a packet(proto=1, 172.20.3.90:103->172.20.29.134:8) from P2P-TO-ASA. code=8, type=0, id=103, seq=0." 2017-04-13 16:35:32 id=20085 trace_id=5 func=init_ip_session_common line=4569 msg="allocate a new session-07626d34" 2017-04-13 16:35:32 id=20085 trace_id=5 func=vf_ip4_route_input line=1596 msg="find a route: flags=00000000 gw-172.20.29.134 via CARD-UAT" 2017-04-13 16:35:32 id=20085 trace_id=5 func=fw_forward_handler line=671 msg="Allowed by Policy-21:" 2017-04-13 16:35:34 id=20085 trace_id=6 func=print_pkt_detail line=4420 msg="vd-root received a packet(proto=1, 172.20.3.90:103->172.20.29.134:8) from P2P-TO-ASA. code=8, type=0, id=103, seq=1." 2017-04-13 16:35:34 id=20085 trace_id=6 func=resolve_ip_tuple_fast line=4479 msg="Find an existing session, id-07626d34, original direction"

 

Thanks

    2 replies

    GusTech
    New Member
    April 15, 2017

    Do you have a route back?

    sonydarrel
    New Member
    April 15, 2017

    yes i have a default route pointing towards core switch which has all the Network, the strange is that the other ip in the same subnet i am able to ping.

     

    Thanks

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT