Skip to main content
ahmadhusain
New Member
May 24, 2018
Question

Traceroute not showing hop

  • May 24, 2018
  • 11 replies
  • 30298 views

Dear

 i'm facing the traceroute issue on the fortigate 

when i try to tracroute from the cisco router to fortigate it's not showing the route form router to firewall

the FG firewall configured behind of the router.

everything is working fine i can ping form the router but when i tracerouter it showing *****

when i try form the computer it's showing me the hop count 

i also tried to check from the switch i'm getting same result as like the router, not showing the route.

 please help

Thanks 

    11 replies

    Nicholas_Doropoulos
    New Member
    May 27, 2018

    Is it the WAN interface of the firewall you cannot traceroute to? If yes, ensure that the "ping" box is enabled on the WAN interface on the GUI under Network>Interfaces. Alternatively, execute the following command on the CLI:

     

    show system interface [relevant port]

     

    If ping is not listed there, do the following:

     

    config system interface 

    edit [relevant port]

    set allowaccess ping [along with any other protocols already listed]

     

    I hope the above helps.

    ahmadhusain
    New Member
    May 28, 2018

    the ping and other services are allowed on the firewall 

    i can ping the firewall only problem with the traceroute 

    Nicholas_Doropoulos
    New Member
    May 28, 2018

    Do you traceroute by hostname or IP address?

    ahmadhusain
    New Member
    June 9, 2018

    Thanks for your help

     

    my problem is when i try to ping or traceroute form the router it's showing me the timeout from the remote site.But when i try to ping from any client computer OS "windows" it's working both can traceroute and ping from the remote site Only problem coming with the router    Please Help   

    iqbshaik
    New Member
    December 7, 2018

    It depends on session. When there is no session from the source ip and the first trace packet you send through fortigate then it will show its hop in tracert. In the proceeding traceroutes it will not show you its ip in trace till the session timeout. Kill the session on fortigate and trace again you will see the hop in the trace again. 

    rwpatterson
    New Member
    December 7, 2018

    In the CLI, check the PING options. Make sure the interface is the one you want to trace route from.

     

    Gateway # exec ping-options source

    <string> auto | <source interface ip>

     

    Also, if the other end of the trace route is over a tunnel, make sure the source (or interface) IP is allowed over that span.

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT