fortigate vm route out of wrong interface, while configured differently

[Ralph1973]

Hello, I also logged a ticket for this with Fortinet, but there's still no solution that works.

For a customer I configured a Fortigate VM with several vdoms and vdom links

What happens is that routing table in External vdom is configured to route traffic to network 192.168.247.0/24

via the internal vdomlink. What happens is, that traffic is routed out of another interface, i.e. the default gateway to the internet.

What is remarkable is that the routing monitor shows the correct route to that 192.168.247 network, while the kernel routing table doesn't mention this subnet.

Someone who recognizes this strange behaviour? Is it a vmware issue?

I also upgraded the firewall from 5.0.11 to 5.2.5 already, what -unfortunately- did not solve it!

Kind regards

Ralph Willemsen

Arnhem, Netherlands

[Ralph1973 · Accepted solution]

Ok, problem solved. Fyi: there were vips configured where I had to disable arp replies for them. Now it seems to work well.

Regards,

Ralph Willemsen

Arnhem, Netherlands