Skip to main content
TJMontanes
Visitor III
February 14, 2022
Solved

New IP Subnet has no internet

  • February 14, 2022
  • 1 reply
  • 1732 views

Hi,

 

Currently having some concerns as I'm adding a /22 on my policy. I have a working configuration for /24 and the new one cant push the internet connection even that policy setup is working before.

Best answer by akristof

Hello,

 

Thank you for question. If you are expanding subnet, I would check couple of things:

- Verify that the new subnet has correct address in all firewall policies

- If FortiGate is also DHCP server, adjust settings there too.

- Verify if there is no subnet overlap and check also overlap with VIPs and ippools

Start with simple ping to internet, check debug flow and packet capture.

Check if traffic is allowed or being blocked, based on that you can follow up with troubleshooting:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Using-filters-to-review-traffic-traversing-the/ta-p/195025

1 reply

akristof
Staff
akristofAnswer
Staff
February 14, 2022

Hello,

 

Thank you for question. If you are expanding subnet, I would check couple of things:

- Verify that the new subnet has correct address in all firewall policies

- If FortiGate is also DHCP server, adjust settings there too.

- Verify if there is no subnet overlap and check also overlap with VIPs and ippools

Start with simple ping to internet, check debug flow and packet capture.

Check if traffic is allowed or being blocked, based on that you can follow up with troubleshooting:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Using-filters-to-review-traffic-traversing-the/ta-p/195025

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.