Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
yancha67
New Contributor

Can't ping from FortiGate to client connected to FortiSwitch

We adopted a Fortiswitch via the Fortilink and created a VLAN, the VLAN is untagged on the switch port and connected a PC

I can ping from the machine to the Fortigate which is the gateway for that VLAN but I can't ping from the FortiGate to the machine. I also turned DHCP on that VLAN and the PC got an IP but could not ping from the FortiGate also.

I am missing something stupid probably, but can't figure it out.

Thanks for the help in advance

10.0.0.0.1 192.168.1.254
3 REPLIES 3
asengar
Staff
Staff

Hi Yancha,

 

Can you share the output of below command to verify if packet is sent out from Firewall

dia sniffer packet any 'host x.x.x.x' 4 0 a
where x.x.x.x is the IP address of the PC connected behind the fortiswitch

collect the logs while pinging from the PC to FGT and FGT to PC

Thanks

@bhishek
akanibek
Staff
Staff

I think on Windows workstation, ICMP-in is blocked on its Windows Firewall. Could you check it? 

https://activedirectorypro.com/allow-ping-windows-firewall/

Asset
PatrikS
New Contributor

When U ping from a Fortigate U ping from Fortigate default interface probably not the vlan interface.
And U dont have a role for allowing ping between the nets.
U have to set what interface U ping from. with cli : 
execute ping-options interface 192.168.1.254
<string> Auto | <outgoing interface>.
Set the Vlan interface on FGT as outgoing and try to ping 

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors