VIP Behavior

1 reply
1723 views

I have created VIP objects on the Fortigate. Since I am in the process of replacing another firewall with the Fortigate. Now I have experienced the following phenomenon. Every request is sent to the Fortigate and not to the other firewall running in parallel. How can this be that the Fortigate gets these requests although I have not yet created a policy just the VIP Objects?

FortiGate

saneeshpv_FTNTAnswer

Staff

Hi,

Once you create a VIP object in the FortiGate it will start performing ARP reply as this VIP now belongs to Fortigate. You may disable ARP for that VIP.

# config firewall vip
edit <name>
set arp-reply disable (default: enable)
next
end

https://community.fortinet.com/t5/FortiGate/Technical-Tip-ARP-reply-setting-in-Virtual-IP-IP-Pool/ta-p/192527

Best Regards,