Skip to main content
mo4
mo4
Visitor III
May 26, 2026
Question

lost conection and browsing on ssid tunnel

  • May 26, 2026
  • 6 replies
  • 171 views

Hi

i have fortigate 60f and fortiap 231k 

ios on fortigate 7.6.6

i faced problem  on ssid tunnel just lost connection and browsing   But have ip 

on ios such as 7.4.11 no problem just 7.6.6

thanks

6 replies

AEK
SuperUser
AEK
SuperUser
May 26, 2026

Hi Mo4

Try check if the client lost its IP, if the DNS works, if you still ping the FGT and other destinations by IP, and if the trafic logs still show the packets from the client.

AEK
    mo4
    mo4Author
    Visitor III
    May 26, 2026

    No lost ip and internet work on ssid bridge and local

    AEK
    SuperUser
    AEK
    SuperUser
    May 26, 2026

    From the client try ping the default gw and 1.1.1.1

    AEK
      mo4
      mo4Author
      Visitor III
      May 26, 2026

      Gw reach but 1.1.1.1 not reach 

      mo4
      mo4Author
      Visitor III
      May 26, 2026

      By the way all test do 

      problem is on firmware 7.6.6 

      funkylicious
      SuperUser
      funkylicious
      SuperUser
      May 26, 2026

      i encountered a similar behaviour on a pair of 200F on 7.6.6 and having connected 231G, 431G, 23JF.

      i could get an IP, ping towards the GW would work some times then it stopped, also towards the Internet was down but in the debug I could see the traffic going out and a reply coming back to FGT but never reached the initiator/source.

      could only resolve it with downgrade to 7.4.11 release on FGT.

      "jack of all trades, master of none"
        AEK
        SuperUser
        AEK
        SuperUser
        May 26, 2026

        Enter the below commands on FGT CLI then retry the ping test to 1.1.1.1.

        diag debug flow filter addr x.x.x.x

        diag debug flow filter proto 1

        diag debug console timestamp enable

        diag debug flow show iprope enable

        diag debug flow show function-name enable

        diag debug flow trace start 100

        diag debug enable

        AEK
          mo4
          mo4Author
          Visitor III
          June 1, 2026

          Could the problem be the Wi-Fi certificate?       Fortinet_Wifi -Expired

          AEK
          SuperUser
          AEK
          SuperUser
          June 1, 2026

          The certificate is checked at connection time. Since you are already connected then it cannot be a certificate issue.

          AEK
          AEK
          SuperUser
          AEK
          SuperUser
          May 26, 2026

          BTW what is the FortiAP firmware version?

          AEK
          funkylicious
          SuperUser
          funkylicious
          SuperUser
          May 26, 2026

          in my case the issue with FOS 7.6.6 was present during v7-build0713 ( 7.4.4 ) on the APs but also on the 7.6.x version that i upgraded them to.

          first I tested with the FAP from 7.6.X w/ FOS 7.6.6 - NOK

          then I dowgraded  FAP from 7.6.x > 7.4.4 w/ FOS 7.6.6 - NOK

          lastly, I downgraded FOS 7.4.11 w/ FAP 7.4.4 - OK

          "jack of all trades, master of none"
            Terms & ConditionsAccessibility statement