Multiple network using Fortigate 100-F port 1, port 2 and etc

Hi,

You dont need any route definitions here as all these networks should be listed as connected networks on firewall. Is the host 192.168.2.10 able to ping 192.168.1.1? Could you list the output of below commands,

#get router info routing-table all

#get sys arp

#diag sniffer packet any 'host 192.168.2.10 and (icmp or arp)' 4 0 l

After issuing the last command, ping to 192.168.2.10 from 192.168.1.10 so that traffic is recorded in the capture.

Best regards,

Jin

First, I want to confirm you removed all port1, 2 and 3 out of the default "lan" VLAN switch. Right? I believe you did. Otherwise, you wouldn't be able to configure 192.168.1.1/24 on port1. But just wanted to make sure.
Then, I would just sniff ping packets like
"diag sniffer packet any 'host 192.168.2.10" 4 0 l"

when you ping from 1.10 to 2.10. You should be able to see ping requests come in at port1 and go out to port2. Then if successful, ping responses come back from port2 then go out to port1. So you can see where the breaking point is.

Toshi