Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
paulinster
New Contributor III

ping restriction to IP

Hi all, 

I have IP pool setup for my internet. However I am in the need to have the IP pingable from certain public host for monitoring. How can I have the IP pool pingable. I have create a firewall rule but didn't seem to have make it work. Any suggestion? 

3 REPLIES 3
samsam
New Contributor

Can you share how the rule is configured?

 

ede_pfau

I don't think FortiOS will do proxy arp for a source NAT pool. If you need this functionality you might try to add these addresses as secondary IPs of the WAN interface. They are pingable but not automatically used as source addresses for outbound traffic. Maybe the combination of both will do the trick.

Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
lobstercreed

 

You should be able to create a VIP object for the same address as your IP pool and use it as the destination in a firewall rule where ECHO is the only service allowed.  This has always worked for me...you can ping remote.sfccmo.edu because I wanted something I could reliably ping to see if my WAN was up when I was not in the office.

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors