Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
achref
New Contributor

FortiGate: pinging problem

Hi all,

 

please i have a fortigate i want to pinging through two ports but the ping always send from one port

if there are anyone here please know how i could push the ping to sended via the port ?!

config bellow:

 

edit "port3" set vdom "root" set ip 10.254.10.101 255.255.254.0 set allowaccess ping https ssh http telnet set type physical set snmp-index 3 next edit "port4" set vdom "root" set ip 10.254.20.102 255.255.252.0 set allowaccess ping https ssh http telnet set type physical set snmp-index 4 next

 

config router static edit 3 set gateway 10.254.10.1

set dst 0.0.0.0/0 set device "port3" next edit 4 set gateway 10.254.20.2

set dst 0.0.0.0/0 set device "port4" next end

 

 

execute traceroute 10.254.151.1 (PS: this one is correct) traceroute to 10.254.151.1 (10.254.151.1), 32 hops max, 3 probe packets per hop, 84 byte packets 1 10.254.10.1 7.385 ms 4.384 ms 3.335 ms 2 10.254.111.11 11.473 ms 5.004 ms 5.487 ms 3 10.254.112.21 14.326 ms 15.581 ms 14.088 ms 4 10.254.151.51 20.117 ms 10.824 ms 10.623 ms 5 10.254.151.1 12.562 ms 15.848 ms 12.937 ms

 

 

execute traceroute 10.254.252.2 traceroute to 10.254.252.2 (10.254.252.2), 32 hops max, 3 probe packets per hop, 84 byte packets 1 10.254.10.1 4.201 ms 3.177 ms 7.665 ms ( this one is wrong must be 10.254.20.2) 2 10.254.10.1 5.056 ms !H 3.137 ms !H *

 

3 REPLIES 3
Toshi_Esumi
SuperUser
SuperUser

Then, you need to have a specific route for the subnet including 10.254.252.2 toward port4. Otherwise the FGT just pick either interface based on two default routes with the same cost (ECMP).

nicerobot_FTNT

execute ping-options source [source-ip]

 

also 

 

execute traceroute options [source-ip]

 

give it a try

---

Opinions expressed are my own and may not represent the official opinion of my employer.

achref
New Contributor

thank you for your response,

 

i try to forced the ping through the orther port, it worked but the other port be down !!

 

even i try to managed the FGT from GUI but the some thing always one single port is working a want to ping from both ports !

 

Labels
Top Kudoed Authors