Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Khan-qureshi
New Contributor

Unable to ping from Local-PC to router's interface

Hi. I am Practicing a simple Lab in which I am using a FortiGate Firewall. The Topology is pasted Below;

I created a policy on firewall to allow ping from local-PC to e0/1 interface of router. I have configured FortiGate interfaces, done static routing on both firewall and on Router. I also created a policy on FortiGate to allow access but still I am unable to ping. What can be the reason??

paint-1.jpg

image.jpg

 

 

Khanafsar
Khanafsar
25 REPLIES 25
Khan-qureshi

PC-Routes.jpg

Yes. After removing 192.168.44.1 gateway I can ping 10.0.1.254 (firewall port3 IP) and 10.200.2.254 (R3's e0/1 IP). However, now i cannot access firewall via GUI.

Khanafsar
Khanafsar
Khan-qureshi

PC-ping.jpg

GUI-access.jpg

As you can see in snapshots, I can ping firewall from PC but unable to login into firewall via GUI. I have already executed commads "set allowaccess http https ping" on port3 of firewall

Khanafsar
Khanafsar
AEK

From which IP you cannot connect to FG GUI.

And what you mean by "unable to login via GUI"? Do you mean the login page is not displayed or you have an error message when you enter credentials?

AEK
AEK
Khan-qureshi

From which IP you cannot connect to FG GUI: 10.0.1.254
And what you mean by "unable to login via GUI"? Do you mean the login page is not displayed or you have an error message when you enter credentials? Login page is displaying but when i enter user name: admin and password:.... and press login button same login page is dispalyed again. 

Khanafsar
Khanafsar
srajeswaran

Can you login via console and check if there is any trustedhost config under admin "config system admin"?

https://community.fortinet.com/t5/FortiGate/Technical-Tip-System-administrator-best-practices/ta-p/1...



Regards,

Suraj

- Have you found a solution? Then give your helper a "Kudos" and mark the solution.

Khan-qureshi

GUI-access.jpg

As can be seen i am using 10.0.1.254 IP for login. Page is loaded but when i enter username and password and press login i get the same login page again

Khanafsar
Khanafsar
AEK

I mean from which PC (source) you are trying to connect to FG GUI?

Also please try open the GUI using a private browser window.

AEK
AEK
Khan-qureshi

I mean from which PS (source) you are trying to connect to FG GUI? 10.0.1.20/24
Also please try open the GUI using a private browser window. Yes i am trying in private browser 

Khanafsar
Khanafsar
AEK

This PC is on the same subnet as FortiGate, so it is not a routing issue.

As suggested by @srajeswaran it is probably due to trustedhosts config.

AEK
AEK
Khan-qureshi

oky Thankyou AEK. much appreciated support. My major problem has been solved. Thankyou again. I will recheck rest of issues.

Khanafsar
Khanafsar
Labels
Top Kudoed Authors