- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Internet data not passing from firewall
- Labels:
-
FortiGate
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
HI @gobinda ,
Can you ping the default gateway (ISP IP) ?
Have you enabled NAT on the policy ?
If you have found a solution, please like and accept it to make it easily accessible for others.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @dbu
i have tried to ping default gateway(ISP) but it's not heppening. 100% packet lose.
and I have enable NAT on policy.
But till internet is not passing..
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
It looks like a routing issue.
Verify one more time the configs:
Routing:
config router static
edit 1
set gateway 10.x.x.x. >>> replace with the ISP IP address on the other side of the link.
set device "port1"
next
end
Make sure PING is enabled on the interface :
config system interface
edit "port1"
set allowaccess ping
next
end
Firewll policy
From inside LAN to outside interface (wan toward the ISP) with NAT enabled (Use outgoing interface address)
If you have found a solution, please like and accept it to make it easily accessible for others.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @gobinda,
If you can't ping the default gateway, it is a layer 2 issue. You can check the arp table by running 'get system arp', do you see an arp entry for the default gateway? You can also run sniffer on wan1 'di sniffer packet wan1 'none' 4 0 l'
Regards.
