VIP Behavior

AUT_Maverick · ‎07-24-2023

I have created VIP objects on the Fortigate. Since I am in the process of replacing another firewall with the Fortigate. Now I have experienced the following phenomenon. Every request is sent to the Fortigate and not to the other firewall running in parallel. How can this be that the Fortigate gets these requests although I have not yet created a policy just the VIP Objects?

HUVA

saneeshpv_FTNT · ‎07-25-2023

Hi,

Once you create a VIP object in the FortiGate it will start performing ARP reply as this VIP now belongs to Fortigate. You may disable ARP for that VIP.

# config firewall vip
edit <name>
set arp-reply disable (default: enable)
next
end

https://community.fortinet.com/t5/FortiGate/Technical-Tip-ARP-reply-setting-in-Virtual-IP-IP-Pool/ta...

Best Regards,

View solution in original post

saneeshpv_FTNT · ‎07-25-2023

Hi,

Once you create a VIP object in the FortiGate it will start performing ARP reply as this VIP now belongs to Fortigate. You may disable ARP for that VIP.

# config firewall vip
edit <name>
set arp-reply disable (default: enable)
next
end

https://community.fortinet.com/t5/FortiGate/Technical-Tip-ARP-reply-setting-in-Virtual-IP-IP-Pool/ta...

Best Regards,

VIP Behavior

Nominate a Forum Post for Knowledge Article Creation