Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Christophoros
New Contributor

GNS3 lab with 2 PCs and 1 Fortigate (as a gateway) The PCs cant ping each other

I made a GNS3 lab with 1 Fortigate (as a gateway) and 2 PCs:

Structure:
1. PC1 -> Fortigate (Port1).
2. PC2 -> Fortigate (Port2).

Configurations:

Fortigate:

config system interface
edit "port1"
set mode static
set ip 10.0.0.1 255.255.255.0
set allowaccess ping https ssh
next
end

config system interface
edit "port2"
set mode static
set ip 11.0.0.1 255.255.255.0
set allowaccess ping https ssh
next
end

config firewall policy
edit 1
set name “PC1-to-PC2”
set srcintf "port1"
set dstintf "port2"
set srcaddr "all"
set dstaddr "all"
set action accept
set schedule "always"
set service "ALL"
set nat enable
next

edit 2
set name “PC2-to-PC1”
set srcintf "port2"
set dstintf "port1"
set srcaddr "all"
set dstaddr "all"
set action accept
set schedule "always"
set service "ALL"
set nat enable
next
end

PCs ip: 10.0.0.2/24, 11.0.0.2/24 and the gateway the fortigate.

PCs firewall are disable.

The PCs can ping the fortigate but cant ping each other.

What i am doing wrong?

13 REPLIES 13
funkylicious

i think you have some kind of misconfiguration now that i get a better look at your setup you posted.

you have you have 10.0.0.1/24 on port1 and 11.0.0.1/24 on port2 while PC's are with 192.168.0.2/24 connected on port1 and 192.168.1.2/24 on port2.

 

please make sure you have the correct IP addresses configured.

"jack of all trades, master of none"
"jack of all trades, master of none"
Christophoros

Yes at the beging i configure my LANs as 10.0.0.0/24 and 11.0.0.0/24 but because someone told me that maybe the fortigate acknowledged that the 11.0.0.0/24 is not a private but public and it block it. So i replace 10.0.0.0/24 with 192.168.0.0/24 and 11.0.0.0/24 with 192.168.1.0/24

 

Christophoros
New Contributor

Is there any chance to have this problem cause my VM has not a license?

 

funkylicious

this basic setup should work but i wouldnt exclude it. try rebooting the fgt tho and see then.

"jack of all trades, master of none"
"jack of all trades, master of none"
Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors