Skip to main content
paulinster
paulinster
Visitor III
November 14, 2018
Question

ping restriction to IP

  • November 14, 2018
  • 1 reply
  • 5139 views

Hi all, 

I have IP pool setup for my internet. However I am in the need to have the IP pingable from certain public host for monitoring. How can I have the IP pool pingable. I have create a firewall rule but didn't seem to have make it work. Any suggestion? 

    1 reply

    samsam
    samsam
    New Member
    November 17, 2018

    Can you share how the rule is configured?

     

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    November 17, 2018

    I don't think FortiOS will do proxy arp for a source NAT pool. If you need this functionality you might try to add these addresses as secondary IPs of the WAN interface. They are pingable but not automatically used as source addresses for outbound traffic. Maybe the combination of both will do the trick.

    lobstercreed
    lobstercreed
    New Member
    November 30, 2018

     

    You should be able to create a VIP object for the same address as your IP pool and use it as the destination in a firewall rule where ECHO is the only service allowed.  This has always worked for me...you can ping remote.sfccmo.edu because I wanted something I could reliably ping to see if my WAN was up when I was not in the office.

    Terms & ConditionsAccessibility statement