Skip to main content
MAIKO
New Member
April 11, 2023
Question

How can 2 LANs communicate/exchange traffic inside FortiGate ?

Hi I'm struggling trying to communicate from 2 different LANs inside fortigate , what can I do ? 

 

 I want to ping PC3 from PC1 and vice-versa or the internet (8.8.8.8) from any PC but I can't

 

I can ping all the PCs and the Internet from FortiGate CLI tho, I think I read I should do routing policy but Idk how to do that exactly 

 

 

 

 

 

3 replies

abarushka
Staff
Staff
April 12, 2023

Hello,

You may consider to collect traffic sniffer "diagnose sniffer packet any 'host 10.20.10.11 and host 10.20.20.13' 4 0 a" and debug flow while pinging:

 

diagnose debug flow filter saddr 10.20.10.11
diagnose debug flow filter daddr 10.20.20.13
diagnose debug flow show function-name enable
diagnose debug flow trace start 10
diagnose debug enable

MAIKO
MAIKOAuthor
New Member
April 12, 2023

So I apparently I did it , just added 6 firewall policies 

 

is there a guide that shows all different CLI commands please ? and isn't there a better way to do what I just did ?

abarushka
Staff
Staff
April 12, 2023

Hello,

 

Traffic should be explicitly allowed, otherwise it will be dropped. In the debug flow firewall policy lookup process is shown.

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT