Hello Team,
Please help me to trouble shoot on the below issue
I have fortinet firewall VM (FortiOS v6.4.15 build2095 (GA)) setup, there two active ports WAN and LAN.
I have connected to a system to my LAN network, the system is assigned with an IP (70.10.10.2) coming from the Fortinet LAN interface, but not getting the internet connection or not able to ping 8.8.8.8 though i have created the policy to route through WAN.
i am sharing below, the debug comments i used and the result i got from it. pls help me on this.
FortiOS-FW-01 # diagnose debug disable
FortiOS-FW-01 # diagnose debug reset
FortiOS-FW-01 # diagnose debug flow filter saddr 70.10.10.2
FortiOS-FW-01 # diagnose debug flow filter daddr 8.8.8.8
FortiOS-FW-01 # diagnose debug flow filter proto 1
FortiOS-FW-01 # diagnose debug flow trace start 100
FortiOS-FW-01 # diagnose debug enable
FortiOS-FW-01 # id=20085 trace_id=3 func=print_pkt_detail line=5822 msg="vd-root:0 received a packet(proto=1, 70.10.1
0.2:1->8.8.8.8:2048) from port3. type=8, code=0, id=1, seq=4388."
id=20085 trace_id=3 func=init_ip_session_common line=5993 msg="allocate a new session-00008e9a"
id=20085 trace_id=3 func=vf_ip_route_input_common line=2615 msg="find a route: flag=04000000 gw-192.168.1.1 via port2
"
id=20085 trace_id=4 func=print_pkt_detail line=5822 msg="vd-root:0 received a packet(proto=1, 70.10.10.2:1->8.8.8.8:2
048) from port3. type=8, code=0, id=1, seq=4389."
id=20085 trace_id=4 func=init_ip_session_common line=5993 msg="allocate a new session-00008e9b"
id=20085 trace_id=4 func=vf_ip_route_input_common line=2615 msg="find a route: flag=04000000 gw-192.168.1.1 via port2
"
id=20085 trace_id=5 func=print_pkt_detail line=5822 msg="vd-root:0 received a packet(proto=1, 70.10.10.2:1->8.8.8.8:2
048) from port3. type=8, code=0, id=1, seq=4390."
id=20085 trace_id=5 func=init_ip_session_common line=5993 msg="allocate a new session-00008e9e"
id=20085 trace_id=5 func=vf_ip_route_input_common line=2615 msg="find a route: flag=04000000 gw-192.168.1.1 via port2
"
id=20085 trace_id=6 func=print_pkt_detail line=5822 msg="vd-root:0 received a packet(proto=1, 70.10.10.2:1->8.8.8.8:2
048) from port3. type=8, code=0, id=1, seq=4391."
id=20085 trace_id=6 func=init_ip_session_common line=5993 msg="allocate a new session-00008ea2"
id=20085 trace_id=6 func=vf_ip_route_input_common line=2615 msg="find a route: flag=04000000 gw-192.168.1.1 via port2
@Iescudero - i got the above debug comment from one of your solution
Hi Kichu
Hi AEK,
Thanks for the reply, tried but no luck
Please confirm your LAN IP and DHCP . Debug showing traffic routed to your gw-192.168.1.1 via port2
Check the route to the Internet
LAN ip is 70.10.10.1 DHCP 70.10.10.2 - 254
wan ip is - 192.168.1.25 and gateway is 192.168.1.1
Hi @kichu,
Based on the output, traffic was forwarded to 192.168.1.1 but no response. Can you ping 192.168.1.1?
Regards,
Can you ping 192.168.1.1 from FortiGate? You can run the following commands:
exec ping 192.168.1.1
get system arp
Regards,
Check the route print for the client machine to find the next hop
Here is the result when i run route print,
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1857 | |
1133 | |
769 | |
447 | |
263 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.