Skip to main content
scheuri
Explorer III
December 9, 2021
Solved

VRRP-IP and icmp or ping reponses

Dear community

 

My question is:

Does a VRRP-IP (the "gateway") generally answer to ping/icmp requests (or not)?

 

We have four fortigates in two datacenters (in each datacenter is an active/passive cluster). On each of those clusters are the same vlans configured and we spanned vrrp over these vlans.

The goal is, that everything does to one datacenter, until both fortigates in that datacenter (or the whole datacenters) goes down...and then the vrrp-ip should go to the second cluster in the other datacenter.

The ip addresses of the fortigate clusters temselves in those vlans are answering to ping/icmp as expected (because it is configured accordingly).

 

However, the customer claims that the vrrp ip in the vlan is not responding to IP.

We still are investigating, but I just want to ask whether the vrrp ip in general is supposed to answer to pings or not (to make sure we are not chasing ghosts here :)).

 

Thanks for your help

scheuri

 

FortiGate 

Toshi_Esumi
SuperUser
December 10, 2021

I just tested with FG40F+FG50E to confirm vrip is indeed pingable. But I didn't expect I could ping from the vrip (source IP) to a device in the network, which was also confirmed by wireshark on the client device.

2 replies

Toshi_Esumi
SuperUser
SuperUser
December 10, 2021

I just tested with FG40F+FG50E to confirm vrip is indeed pingable. But I didn't expect I could ping from the vrip (source IP) to a device in the network, which was also confirmed by wireshark on the client device.

scheuri
scheuriAuthor
Explorer III
December 10, 2021

Hello Toshi

Thanks a lot for your reply and testing. Much appreciated.

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT