Skip to main content
VitaliyN
VitaliyN
New Member
June 8, 2020
Question

Policy routes, inbound doesn't work

  • June 8, 2020
  • 1 reply
  • 2250 views

Hello!

using Fortigate 100e, firmware v6.4.0 build1579 (GA).

Here is simplified scheme:

 

Policy route outbound to 0.0.0.0 and response works fine, but inbound from 0.0.0.0 doesn't.

We have been using mikrotik routers before, worked fine with mangle and routing marks.

Any way to fix that, or i need to use dedicated interfaces to connect FGT01 with FGT03, TMG1 and TMG2 ?

 

 

1 reply

Toshi_Esumi
SuperUser
Toshi_Esumi
SuperUser
June 8, 2020

My instinct says you probably need to split them into three different interfaces, like three VLANs. A FGT returns to the same "interface" if the session was initiated by outside as long as those three default routes exist (true in your case). Your current setup is the three GWs are on the same interface (port4) so I would assume the FGT01 always returns to 172.16.254.253 for out-to-in sessions.

Does anyone have a different idea?

Terms & ConditionsAccessibility statement