Skip to main content
boozely25
New Member
September 19, 2018
Question

Interfaces Not Communicating

  • September 19, 2018
  • 2 replies
  • 7083 views

I setup two Fortigate 60E's to connect over an elan circuit.  the interfaces are hardware switches

DR_ELAN - ELAN2\ip 192.168.50.3/24

HQ_ELAN -  ELAN2\192.168.50.1/24.

 

I connected them both and they both show up\full 1000, bit I cannot ping or traceroute or anything

Traceroute:

DR_ELAN--> execute traceroute 192.168.50.1

DR_ELAN # execute traceroute 192.168.50.1
traceroute to 192.168.50.1 (192.168.50.1), 32 hops max, 3 probe packets per hop, 72 byte packets
 1 127.0.0.1 <localhost> 2998.414 ms !H 2995.406 ms !H 2999.901 ms !H

HQ_ELAN --> execute traceroute 192.168.50.3

HQ_ELAN # execute traceroute 192.168.50.3
traceroute to 192.168.50.3 (192.168.50.3), 32 hops max, 3 probe packets per hop, 72 byte packets
 1 * * *
 2 * * *
 3 * * * 

 

 

Diagnose Sniffer:

 

DR_ELAN # diagnose sniffer packet ELAN2 none 4 5 a
interfaces=[ELAN2]
filters=[none]
2018-09-19 21:21:06.740003 ELAN2 -- arp who-has 192.168.50.1 tell 192.168.50.3
2018-09-19 21:21:07.739945 ELAN2 -- arp who-has 192.168.50.1 tell 192.168.50.3
2018-09-19 21:21:08.739944 ELAN2 -- arp who-has 192.168.50.1 tell 192.168.50.3
2018-09-19 21:21:18.750037 ELAN2 -- arp who-has 192.168.50.1 tell 192.168.50.3
2018-09-19 21:21:19.749976 ELAN2 -- arp who-has 192.168.50.1 tell 192.168.50.3

 

HQ_ELAN # diagnose sniffer packet ELAN2 none 4 5 a
interfaces=[ELAN2]
filters=[none]
2018-09-19 21:19:46.236534 ELAN2 -- arp who-has 192.168.50.1 tell 192.168.50.3
2018-09-19 21:19:46.236567 ELAN2 -- arp reply 192.168.50.1 is-at 70:4c:a5:80:bd:41
2018-09-19 21:19:48.260313 ELAN2 -- 192.168.50.1.500 -> 192.168.50.3.500: udp 716
2018-09-19 21:19:53.270243 ELAN2 -- arp who-has 192.168.50.3 tell 192.168.50.1
2018-09-19 21:19:54.270242 ELAN2 -- arp who-has 192.168.50.3 tell 192.168.50.1

 

 

Can anyone help me troubleshoot this?

 

Thank you in advance

    2 replies

    sw2090
    SuperUser
    SuperUser
    September 20, 2018

    Hm !H in the output of traceroute means "Host unreachable". So probably you have some routing issues?

    Maybe a diag debug flow might provide additional info...

    ede_pfau
    SuperUser
    SuperUser
    September 20, 2018

    How did you configure the interface ELAN2? Can you show the config part (text)?

    Do you have each site on a different VLAN, or one big VLAN for all sites?

     

    If your ELAN is VLAN based then this would have to be set up in the interface.

     

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!