VIP Behavior

Forum|Forum|3 years ago
July 25, 2023
1 reply
1710 views

I have created VIP objects on the Fortigate. Since I am in the process of replacing another firewall with the Fortigate. Now I have experienced the following phenomenon. Every request is sent to the Fortigate and not to the other firewall running in parallel. How can this be that the Fortigate gets these requests although I have not yet created a policy just the VIP Objects?

FortiGate

Best answer by saneeshpv_FTNT

Hi,

Once you create a VIP object in the FortiGate it will start performing ARP reply as this VIP now belongs to Fortigate. You may disable ARP for that VIP.

# config firewall vip
edit <name>
set arp-reply disable (default: enable)
next
end

https://community.fortinet.com/t5/FortiGate/Technical-Tip-ARP-reply-setting-in-Virtual-IP-IP-Pool/ta-p/192527

Best Regards,

saneeshpv_FTNTAnswer

Staff

Hi,

Once you create a VIP object in the FortiGate it will start performing ARP reply as this VIP now belongs to Fortigate. You may disable ARP for that VIP.

# config firewall vip
edit <name>
set arp-reply disable (default: enable)
next
end

https://community.fortinet.com/t5/FortiGate/Technical-Tip-ARP-reply-setting-in-Virtual-IP-IP-Pool/ta-p/192527

Best Regards,

Sign up

Login with SSO

Login to the community

Login with SSO