Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Hisoka74
New Contributor

Firewall block icmp ?

hello everyone, im just new here and i have i problem with firewall .i setup like that, when i put firewall alone with internet i can access web gui fortinet ,but when i put i after router and config like that ,i can ping each other ,router can ping 8.8.8.8 but firewall not .I dont know what problem with my firewall now,pls help.sorry for m

1.png

6 REPLIES 6
AEK
SuperUser
SuperUser

Hello

Do you want to access firewall GUI from Internet or you just want your firewall to ping Internet?

 

AEK
AEK
Hisoka74
New Contributor

thanks for your respond,i want both.

ebilcari
Staff
Staff

Starting from your description I guess you have to configure default route on the firewall (next hop 192.168.1.10) and enable NAT on router R1 (or fix the routing from Net). If you want to reach FGT from the internet you have to configure DNAT/port forwarding in the router.

- Emirjon
If you have found a solution, please like and accept it to make it easily accessible for others.
mle2802
Staff
Staff

Hi @Hisoka74,
When connected to the R1, on FortiGate, can you do the following command "execute traceroute 8.8.8.8" and see is the next hop is R1? If yes then the traffic must be drop on R1 and you may need to run debug to see why they are dropping.

Regards,
Minh

smayank
Staff
Staff

Hello

As I can see you are able to access internet directly but not after connecting router.
For this you need to enable internet on router and need to give static route(Gateway will be router interface ip )address.
Regards
Mayank Sharma

Hisoka74

thanks for your respond,you mean enable ip nat outside 192.168.10.1 and give static route right 

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors