cant access internet using Fortigate VM

[afarouk]

I have deployed Fortigate-VM and I am able to access the GUI.

The firewall can access the internet but as a users I can reach the firewall but no internet connection.

I would like some help if there is any configuration needed on the ESXI or the switch where its connected.

1 port connected for LAN and another port connected for WAN.

[srajeswaran]

Can you share "get router info routing-table details 8.8.8.8", and check the forward traffic logs under "logs and report" to see if there are any logs related to your source IP?

[afarouk]

for simplicity i removed sd-wan and only created 1 wan port and made changes to the routing and policy for that WAN only

[afarouk]

[afarouk]

also both the LAN & WAN interfaces on the switch (cisco) configured as trunk.

the LAN interface is used for ESXI and firewall LAN, the WAN interface is separated.

[srajeswaran]

From the user machine, are you able to ping the fortigate IP -10.10.100.254 ?

[afarouk]

yes i have access to the firewall i am on the same subnet

[srajeswaran]

Can you collect below outfrom firewall after initiating a ping from the user machine towards 8.8.8.8

diagnose sniffer packet any "host 8.8.8.8" 4

[afarouk]

[srajeswaran]

Can you check the arp on user machine "arp -a" and confirm the MAC address for 10.10.100.254 is the correct mac showing under fortigate interface ?

get hardware nic port1 -> To find port1 mac address

And then run - diagnose sniffer packet port1 "host 8.8.8.8" 6 , to confirm the MAC address on the packet.