Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hi,
When you try to generate the traffic from 192.168.1.1 IP address, collect the packets from the below commands
Session1:
diag debug reset diag debug enable diagnose debug flow filter saddr 192.168.1.1 diagnose debug flow filter daddr x.x.x.x diag debug flow show console enable diag debug flow show function-name enable diag debug flow trace start 200
Session2:
diag sniff packet any 'host 192.168.1.1 and host x.x.x.x' 4 0 a
Where x.x.x.x is a destination IP address on Mikrotik side.
After initiating the above commands on the ssh session then try to generate the traffic from 192.168.1.1
Cheers
Somu
try "execute ping-option source 192.168.1.1".
Hi,
When you try to generate the traffic from 192.168.1.1 IP address, collect the packets from the below commands
Session1:
diag debug reset diag debug enable diagnose debug flow filter saddr 192.168.1.1 diagnose debug flow filter daddr x.x.x.x diag debug flow show console enable diag debug flow show function-name enable diag debug flow trace start 200
Session2:
diag sniff packet any 'host 192.168.1.1 and host x.x.x.x' 4 0 a
Where x.x.x.x is a destination IP address on Mikrotik side.
After initiating the above commands on the ssh session then try to generate the traffic from 192.168.1.1
Cheers
Somu
try "execute ping-option source 192.168.1.1".
Thank's to both of you,
Toshi 100% right answer.
Fortigate unit use IP address of IPsec VPN interface for ping and MikroTik drop it.
By debugging thanks to Somashekara I found it
Thanx to both
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.