I have advpn shortcut from spoke1 to spoke2 and 3 link connections.
If i traceroute from spoke1 to spoke 2 i got below path
FW01 (Internet) # execute traceroute-options source 10.10.112.2
FW01 (Internet) # execute traceroute 10.101.62.1
traceroute to 10.101.62.1 (10.101.62.1), 32 hops max, 3 probe packets per hop, 84 byte packets
1 10.10.112.1 4.026 ms 4.149 ms 6.013 ms (hub ip)
2 10.10.112.3 9.931 ms 10.167 ms 9.969 ms (spoke tunnel ip)
3 10.101.62.1 10.194 ms 11.533 ms 10.212 ms (endpoint)
FW01 (Internet) # execute traceroute-options source 10.10.111.2
FW01 (Internet) # execute traceroute 10.101.62.1
traceroute to 10.101.62.1 (10.101.62.1), 32 hops max, 3 probe packets per hop, 84 byte packets
1 10.10.111.1 2.554 ms 3.221 ms 3.834 ms (hub ip)
2 10.10.111.3 12.219 ms 16.811 ms 13.925 ms (spoke tunnel ip)
3 10.101.62.1 18.478 ms 17.462 ms 16.482 ms (endpoint)
FW01 (Internet) # execute traceroute-options source 10.103.113.2
FW01 (Internet) # execute traceroute 10.101.62.1
traceroute to 10.101.62.1 (10.101.62.1), 32 hops max, 3 probe packets per hop, 84 byte packets
1 10.103.113.1 1.066 ms 1.083 ms 1.069 ms (hub ip)
2 10.103.113.3 7.030 ms 7.114 ms 6.918 ms (spoke tunnel ip)
3 10.101.62.1 7.333 ms 6.657 ms 7.254 ms (endpoint)
But if i use my laptop under spoke 1 i got this path
Tracing route to 10.101.62.1 over a maximum of 30 hops
1 <1 ms <1 ms <1 ms 10.100.50.1 (core gw ip)
2 8 ms <1 ms <1 ms 10.100.151.1 (spoke1 fgt ip)
3 8 ms 12 ms 9 ms 10.10.112.3 (spoke tunnel ip)
4 9 ms 10 ms 10 ms 10.101.62.1 (endpoint)
Seem when using my laptop then the traffic directly connectd to spoke2 without to hub.
But if why if traceroute from FGT the traffic always goes to hub first?
Hello,
Usually the first packets will always go through the HUB, after that when shortcuts are negotiated, the traffic should flow through the shortcut tunnels, so spoke-to-spoke directly.
Actual generated traffic only can trigger the shortcut negotiation so after that traffic flows spoke-to -spoke.
Hope this helps!
| User | Count |
|---|---|
| 2793 | |
| 1424 | |
| 812 | |
| 749 | |
| 455 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.