Troubleshooting Fortigate Lack of Ping Response (ICMP)
Is there a way to see why a Fortigate will not send an ICMP response?
I have a batch of Fortigate 80Es with the same configuration template.
Some of the Fortigates will stop responding to ping responses back to the switch (connected to a 2000E). The ping goes from my switch and the destination is the 80E loopback IP. The ICMP request does arrive on the Fortigate.
I am using the command below on the CLI of the 80E to troubleshoot the ping failures.
diag sniffer packet any 'icmp' 4
I can see the ICMP requests come in. Most of the Fortigates will send an ICMP reply back and the test passes. There are a few Fortigates that simply do not send an ICMP reply. I don't see a difference between the two different Fortigates that behave differently.
Is there a way to see why a Fortigate will not send an ICMP response?