Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
helmsley
New Contributor

problem wan2 in fg 60d

I have some problem with my fortigate, I'm using Fortigate 60d. And now I have 2 ISP which is I using in wan 1 and wan 2. The problem is, I can't ping my ip public in wan 2 from the outside. But when I switch my wan 2 into wan 1, I can ping it. But still the wan 2 which is now usually I move from wan 1 still can't ping. Can you help me pls? Current Running Firmware: FGT60D-5.00-build292.

5 REPLIES 5
ipns
New Contributor III

execute ping-options source x.x.x.x

execute ping x.x.x.x

Kind Regards, 

IPNS

Kind Regards, IPNS
helmsley
New Contributor

ipns wrote:

execute ping-options source x.x.x.x

execute ping x.x.x.x

sorry..the problem is I can't ping my wan 2 ip public from the outside

oheigl

Is ping enabled under allow access for the WAN2 interface? Also you need a route via WAN2 to the public internet, with the same distance but lower priority. Maybe you could post your routing table in here with masked addresses: get router info routing-table all

Toshi_Esumi
Esteemed Contributor III

Probably because the default route is pointing toward wan1 so your ping from outside comes in wan2 and tries going out to wan1: asymmetric route. You can allow it but would lose most of FW capabilities. Depending on how you want to utilize two internet paths you need to either split them manually per destination groups/routes, make one of them as backup, or set one of load-balancing methods.

s3szy
New Contributor

you need have some setting and the wan2 .  Could you list you wan2 setting   ? 

Labels
Top Kudoed Authors