Skip to main content
Sebix
Sebix
New Member
March 22, 2022
Question

PING to VLANs host

  • March 22, 2022
  • 1 reply
  • 1917 views

Hello.
I have problem with PING to VLANs host. 

I build network in GNS3 with 3 devices FortiGate named:
FG-GDA - IP 10.0.90.1

FG-WAW- IP 10.3.90.1

FG-BYD - IP 10.1.90.1

 

On the FG-BYD I create VLANs:
VLAN2 - 10.1.2.1

VLAN3 - 10.1.3.1

VLAN4 - 10.1.4.1

All in ZONE named LAN

Sebix_0-1647965561433.png

Next I connect one HOST with IP 10.1.4.22 to port3

Sebix_2-1647965909343.png


When I try to PING from FG-GDA ora FG-WAW to the host 10.1.4.22 it unfortunately doesn't work.

But when I PING to Default Gateway VLAN - 10.1.2.1/3.1/4.1 everything works fine.

 

PING from FG-WAW to VLAN4 on FG-BYD

Sebix_1-1647965865007.png

 

Does anyone know what the problem is??
Thanks for help.

 

1 reply

ede_pfau
SuperUser
ede_pfau
SuperUser
March 22, 2022

IMHO there are only 3 reasons possible:

1- routing

2- policy

3- software firewall on host

 

for 1- routing: each node between source host and destination host needs to know how to route forward (to the dest net) and backward (to the source net). In your case, FG-GDA, FG-BYD and the target host need valid routes.

for 2- as the FGT is not only a router, policies permitting the traffic are needed.

for 3- check that you can ping the target host at all, from it's LAN. Sometimes a sw firewall blocks this.

    Sebix
    SebixAuthor
    New Member
    March 23, 2022

    I think routing and policy are ok. 
    But when I PING from FG-BYD to 10.1.4.1 it's ok but to 10.1.4.22 then not work.
    I add trusted Host 10.1.4.0/24 to admin and nothing changed 

    PING FG-BYD to addresses:

    Sebix_0-1648033383748.png


    Trusted Hosts: 

    Sebix_1-1648033415538.png

    When i PING from host 10.1.4.22 to gateway also doesn't work to.Sebix_2-1648034238311.png

     

     

    Terms & ConditionsAccessibility statement