Skip to main content
boozely25
New Member
Sep 19, 2018 9:45 PM UTC
Question

Interfaces Not Communicating

I setup two Fortigate 60E's to connect over an elan circuit.  the interfaces are hardware switches

DR_ELAN - ELAN2\ip 192.168.50.3/24

HQ_ELAN -  ELAN2\192.168.50.1/24.

 

I connected them both and they both show up\full 1000, bit I cannot ping or traceroute or anything

Traceroute:

DR_ELAN--> execute traceroute 192.168.50.1

DR_ELAN # execute traceroute 192.168.50.1
traceroute to 192.168.50.1 (192.168.50.1), 32 hops max, 3 probe packets per hop, 72 byte packets
 1 127.0.0.1 <localhost> 2998.414 ms !H 2995.406 ms !H 2999.901 ms !H

HQ_ELAN --> execute traceroute 192.168.50.3

HQ_ELAN # execute traceroute 192.168.50.3
traceroute to 192.168.50.3 (192.168.50.3), 32 hops max, 3 probe packets per hop, 72 byte packets
 1 * * *
 2 * * *
 3 * * * 

 

 

Diagnose Sniffer:

 

DR_ELAN # diagnose sniffer packet ELAN2 none 4 5 a
interfaces=[ELAN2]
filters=[none]
2018-09-19 21:21:06.740003 ELAN2 -- arp who-has 192.168.50.1 tell 192.168.50.3
2018-09-19 21:21:07.739945 ELAN2 -- arp who-has 192.168.50.1 tell 192.168.50.3
2018-09-19 21:21:08.739944 ELAN2 -- arp who-has 192.168.50.1 tell 192.168.50.3
2018-09-19 21:21:18.750037 ELAN2 -- arp who-has 192.168.50.1 tell 192.168.50.3
2018-09-19 21:21:19.749976 ELAN2 -- arp who-has 192.168.50.1 tell 192.168.50.3

 

HQ_ELAN # diagnose sniffer packet ELAN2 none 4 5 a
interfaces=[ELAN2]
filters=[none]
2018-09-19 21:19:46.236534 ELAN2 -- arp who-has 192.168.50.1 tell 192.168.50.3
2018-09-19 21:19:46.236567 ELAN2 -- arp reply 192.168.50.1 is-at 70:4c:a5:80:bd:41
2018-09-19 21:19:48.260313 ELAN2 -- 192.168.50.1.500 -> 192.168.50.3.500: udp 716
2018-09-19 21:19:53.270243 ELAN2 -- arp who-has 192.168.50.3 tell 192.168.50.1
2018-09-19 21:19:54.270242 ELAN2 -- arp who-has 192.168.50.3 tell 192.168.50.1

 

 

Can anyone help me troubleshoot this?

 

Thank you in advance

    2 replies

    sw2090
    SuperUser
    SuperUser
    Sep 20, 2018 6:08 AM UTC

    Hm !H in the output of traceroute means "Host unreachable". So probably you have some routing issues?

    Maybe a diag debug flow might provide additional info...

    ede_pfau
    SuperUser
    SuperUser
    Sep 20, 2018 8:04 AM UTC

    How did you configure the interface ELAN2? Can you show the config part (text)?

    Do you have each site on a different VLAN, or one big VLAN for all sites?

     

    If your ELAN is VLAN based then this would have to be set up in the interface.

     

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT