Strange behavior, between two Fortigate connected directly by radio link.

Forum|Forum|3 years ago
June 12, 2023
1 reply
870 views

Hello, greetings to all. I'm facing a very strange problem. On one side, I have a Fortigate 500E cluster, with a radio link, connected on the X1 interface, IP 172.18.150.1/28. On the other side, I have a Fortigate 800D cluster, with the other end of the radio link connected to WAN2, IP 172.18.150.3/28. Fortigate 500E can normally ping the Fotigate 800D IP, but the reverse path does not happen, that is, 800D cannot ping 500E, I have already reviewed all interface configurations, ping and https are allowed.

Any idea what could be going on?

I've run out of knowledge.

FortiGate

ebilcari

Staff

Maybe the radio network doesn't handle well the broadcast packets and you may have ARP problems. Can you check if the nodes have learned each other MACs:

# get system arp

Also check the MAC address for the HA cluster and the way FGT handles it: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/564710/cluster-virtual-mac-addresses

Emirjon

Sign up

Login with SSO

Login to the community

Login with SSO