Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
VecH
New Contributor

Internet and activation issues after reset

I did a full reset via the CLI with the command:

exec factoryreset
I looked at the instructions: https://kb.fortinet.com/k....do?externalID=FD37052 Access through the WEB did not work connected via SSH as user: admin set a new password enabled access through the internal interface with the command: CLI commands:
    # config system interface
        edit <interface name>
            set allowaccess ping http https
    end
I looked at the instructions: https://kb.fortinet.com/k....do?externalID=FD34688 Logged in as a browser at http://192.168.1.99 (port 1) When I go through the settings wizard, I can't go through the registration stage (I registered on the site beforehand)

Register with FortiCare This step is required to activate threat protection services and receive firmware & package updates.
I enter login (email) and password Country Can't choose a Reseller
Unable to reach FortiCare servers. Please ensure connection before registration.
--- In the ssh connection, I look at the routes and check the ping, everything is correct:
DRS-GW-001 # get router info routing-table all
Codes: K - kernel, C - connected, S - static, R - RIP, B - BGP
       O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
       * - candidate default

Routing table for VRF=0
S*      0.0.0.0/0 [5/0] via 10.2.33.3, wan1
C       10.2.32.0/22 is directly connected, wan1
C       192.168.1.0/24 is directly connected, internal

DRS-GW-001 # execute ping google.com
PING google.com (172.217.25.110): 56 data bytes
64 bytes from 172.217.25.110: icmp_seq=0 ttl=107 time=336.0 ms
64 bytes from 172.217.25.110: icmp_seq=1 ttl=107 time=335.2 ms
64 bytes from 172.217.25.110: icmp_seq=2 ttl=107 time=335.2 ms
64 bytes from 172.217.25.110: icmp_seq=3 ttl=107 time=335.3 ms
64 bytes from 172.217.25.110: icmp_seq=4 ttl=107 time=336.0 ms

--- google.com ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max = 335.2/335.5/336.0 ms
Why can't I get activated?

1 Solution
VecH
New Contributor

Kindly make the below mentioned changes

config system fortiguard
set fortiguard-anycast disable
end
We were able to modify the FortiGuard Filtering Port. Modified as below:
config system fortiguard
set protocol udp
set port 53
end
After making the changes run
execute update-now
and log out from device and relogin after 2 minutes and check teh status

View solution in original post

1 REPLY 1
VecH
New Contributor

Kindly make the below mentioned changes

config system fortiguard
set fortiguard-anycast disable
end
We were able to modify the FortiGuard Filtering Port. Modified as below:
config system fortiguard
set protocol udp
set port 53
end
After making the changes run
execute update-now
and log out from device and relogin after 2 minutes and check teh status

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors