Strange behavior, between two Fortigate connected directly by radio link.

[itg1]

Hello, greetings to all. I'm facing a very strange problem. On one side, I have a Fortigate 500E cluster, with a radio link, connected on the X1 interface, IP 172.18.150.1/28. On the other side, I have a Fortigate 800D cluster, with the other end of the radio link connected to WAN2, IP 172.18.150.3/28. Fortigate 500E can normally ping the Fotigate 800D IP, but the reverse path does not happen, that is, 800D cannot ping 500E, I have already reviewed all interface configurations, ping and https are allowed.

Any idea what could be going on?

I've run out of knowledge.

[ebilcari]

Maybe the radio network doesn't handle well the broadcast packets and you may have ARP problems. Can you check if the nodes have learned each other MACs:

# get system arp

Also check the MAC address for the HA cluster and the way FGT handles it: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/564710/cluster-virtual-mac-a...