problem wan2 in fg 60d

[helmsley]

I have some problem with my fortigate, I'm using Fortigate 60d. And now I have 2 ISP which is I using in wan 1 and wan 2. The problem is, I can't ping my ip public in wan 2 from the outside. But when I switch my wan 2 into wan 1, I can ping it. But still the wan 2 which is now usually I move from wan 1 still can't ping. Can you help me pls? Current Running Firmware: FGT60D-5.00-build292.

[ipns]

execute ping-options source x.x.x.x

execute ping x.x.x.x

[helmsley]

ipns wrote:

execute ping-options source x.x.x.x

execute ping x.x.x.x

sorry..the problem is I can't ping my wan 2 ip public from the outside

[oheigl]

Is ping enabled under allow access for the WAN2 interface? Also you need a route via WAN2 to the public internet, with the same distance but lower priority. Maybe you could post your routing table in here with masked addresses: get router info routing-table all

[Toshi_Esumi]

Probably because the default route is pointing toward wan1 so your ping from outside comes in wan2 and tries going out to wan1: asymmetric route. You can allow it but would lose most of FW capabilities. Depending on how you want to utilize two internet paths you need to either split them manually per destination groups/routes, make one of them as backup, or set one of load-balancing methods.

[s3szy]

you need have some setting and the wan2 .  Could you list you wan2 setting   ?