Ping timeout

I do ping 10.103.248.44 and the ping is reply, when i do sdwan failover i can see the ping is always timeout.

We must change the ping to other host example 10.103.248.45 and the ping is reply.

Seem the fortigate icmp session to 10.103.248.44 is cached and will be reply if the cache was refreshed.

Anyone know how we can fix this?

SuperUser

Can you share the output:

show full sys global | grep snat

AEK

HS08Author

Visitor III

the result is "set snat-route-change disable"

SuperUser

Can you enable it and try again?

AEK

SuperUser

Can you check if preserve-session-route is enabled for each SD-WAN interface members?

AEK

SuperUser

You may check firewall-session-dirty as well.

AEK

Sign up