Skip to main content
maimaq
New Member
February 11, 2021
Question

Tunnel is up and can ping remote FortiGate/Host but not opposite.

  • February 11, 2021
  • 1 reply
  • 1894 views

On the local side FortiGate 200E is installed that has an IPSec tunnel to Azure FortiGate-appliance:

- Any host on the local side can ping the AzureFortiGate and Azure VM

- But FortiGate 200E (local) itself cannot ping AzureFortiGate's internal or public-facing interface, neither the Azure VM. 

- From the remote side (Azure-FGTVM) or Azure-VM cannot ping local FortiGate or localhost.

- Tried policy-route and SDWAN rule but that didn't help.

 

Thanks in advance and much appreciate if anyone can share their thoughts on what could be the problem?

    1 reply

    marchand
    New Member
    February 12, 2021

    I think you need to select the source interface , try using execute ping-options source , source interface must be FortiGate 200E local LAN .

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.