Skip to main content
boozely25
New Member
September 19, 2018
Question

Interfaces Not Communicating

  • September 19, 2018
  • 2 replies
  • 7093 views

I setup two Fortigate 60E's to connect over an elan circuit.  the interfaces are hardware switches

DR_ELAN - ELAN2\ip 192.168.50.3/24

HQ_ELAN -  ELAN2\192.168.50.1/24.

 

I connected them both and they both show up\full 1000, bit I cannot ping or traceroute or anything

Traceroute:

DR_ELAN--> execute traceroute 192.168.50.1

DR_ELAN # execute traceroute 192.168.50.1
traceroute to 192.168.50.1 (192.168.50.1), 32 hops max, 3 probe packets per hop, 72 byte packets
 1 127.0.0.1 <localhost> 2998.414 ms !H 2995.406 ms !H 2999.901 ms !H

HQ_ELAN --> execute traceroute 192.168.50.3

HQ_ELAN # execute traceroute 192.168.50.3
traceroute to 192.168.50.3 (192.168.50.3), 32 hops max, 3 probe packets per hop, 72 byte packets
 1 * * *
 2 * * *
 3 * * * 

 

 

Diagnose Sniffer:

 

DR_ELAN # diagnose sniffer packet ELAN2 none 4 5 a
interfaces=[ELAN2]
filters=[none]
2018-09-19 21:21:06.740003 ELAN2 -- arp who-has 192.168.50.1 tell 192.168.50.3
2018-09-19 21:21:07.739945 ELAN2 -- arp who-has 192.168.50.1 tell 192.168.50.3
2018-09-19 21:21:08.739944 ELAN2 -- arp who-has 192.168.50.1 tell 192.168.50.3
2018-09-19 21:21:18.750037 ELAN2 -- arp who-has 192.168.50.1 tell 192.168.50.3
2018-09-19 21:21:19.749976 ELAN2 -- arp who-has 192.168.50.1 tell 192.168.50.3

 

HQ_ELAN # diagnose sniffer packet ELAN2 none 4 5 a
interfaces=[ELAN2]
filters=[none]
2018-09-19 21:19:46.236534 ELAN2 -- arp who-has 192.168.50.1 tell 192.168.50.3
2018-09-19 21:19:46.236567 ELAN2 -- arp reply 192.168.50.1 is-at 70:4c:a5:80:bd:41
2018-09-19 21:19:48.260313 ELAN2 -- 192.168.50.1.500 -> 192.168.50.3.500: udp 716
2018-09-19 21:19:53.270243 ELAN2 -- arp who-has 192.168.50.3 tell 192.168.50.1
2018-09-19 21:19:54.270242 ELAN2 -- arp who-has 192.168.50.3 tell 192.168.50.1

 

 

Can anyone help me troubleshoot this?

 

Thank you in advance

    2 replies

    sw2090
    SuperUser
    SuperUser
    September 20, 2018

    Hm !H in the output of traceroute means "Host unreachable". So probably you have some routing issues?

    Maybe a diag debug flow might provide additional info...

    ede_pfau
    SuperUser
    SuperUser
    September 20, 2018

    How did you configure the interface ELAN2? Can you show the config part (text)?

    Do you have each site on a different VLAN, or one big VLAN for all sites?

     

    If your ELAN is VLAN based then this would have to be set up in the interface.