Skip to main content
elyes
New Member
August 12, 2017
Question

PBR not working

  • August 12, 2017
  • 2 replies
  • 4609 views

Hello guys,

 

I have an issue with a PBR. I don't think it is working or may be I didn't configured it well.

I have a route pointing to subnet 10.0.0.0/8 via port1 and I have an out of band mgmt interface mgmt1 192.168.1.1 that should directly be reachable from a machine in the subnet 10.0.0.0/8 (please see the image).

 

I see ping from 10.1.1.1 to mgmt1 but the packet are dropped "reverse path check fail".

I created this PBR : 

incoming int : mgmt1

src : 192.168.1.1

dst : 10.1.1.1

outgoing int : mgmt1 (it should go back from the same interface)

gateway : 192.168.1.254

 

I still have the reverse path check fail :(

 

any ideas? thank

    2 replies

    MikePruett
    New Member
    August 13, 2017

    Are there mutliple routes to the network? Could return traffic be taking an alternate route?

    Fullmoon
    New Member
    August 14, 2017

    based on the attached diagram, correct firewall policies (mgmt-port1, port1-mgmt) could handle the traffic to the right path.

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!