Skip to main content
HS08
Valued Contributor
Mar 10, 2025 10:52 AM UTC
Question

Ping timeout

I do ping 10.103.248.44 and the ping is reply, when i do sdwan failover i can see the ping is always timeout.

We must change the ping to other host example 10.103.248.45 and the ping is reply.

Seem the fortigate icmp session to 10.103.248.44 is cached and will be reply if the cache was refreshed.

Anyone know how we can fix this?

8 replies

AEK
SuperUser
SuperUser
Mar 10, 2025 3:03 PM UTC

Can you share the output:

show full sys global | grep snat
Translate
AEK
HS08
HS08Author
Valued Contributor
Mar 11, 2025 5:43 AM UTC

the result is "set snat-route-change disable"

Translate
AEK
SuperUser
SuperUser
Mar 11, 2025 5:50 AM UTC

Can you enable it and try again?

Translate
AEK
AEK
SuperUser
SuperUser
Mar 11, 2025 6:09 AM UTC

Can you check if preserve-session-route is enabled for each SD-WAN interface members?

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Enabling-the-preserve-session-route/ta-p/197976

Translate
AEK
AEK
SuperUser
SuperUser
Mar 11, 2025 6:16 AM UTC
Risk and Resilience in the Age of AI. An OT Thought Leadership Summit for Houston's Critical Infrastructure Leaders. Date: Thursday, December 3, 2026. Time: 8:30 am - 1:30 pm (CT). Location: The Westin Houston, Memorial City | 945 Gessner Road, Houston, TX 77024