Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
HS08
Contributor

sdwan shortcut traceroute

I have advpn shortcut from spoke1 to spoke2 and 3 link connections.

If i traceroute from spoke1 to spoke 2 i got below path

 

FW01 (Internet) # execute traceroute-options source 10.10.112.2

FW01 (Internet) # execute traceroute 10.101.62.1
traceroute to 10.101.62.1 (10.101.62.1), 32 hops max, 3 probe packets per hop, 84 byte packets
1 10.10.112.1 4.026 ms 4.149 ms 6.013 ms (hub ip)
2 10.10.112.3 9.931 ms 10.167 ms 9.969 ms (spoke tunnel ip)
3 10.101.62.1 10.194 ms 11.533 ms 10.212 ms (endpoint)

 

FW01 (Internet) # execute traceroute-options source 10.10.111.2

FW01 (Internet) # execute traceroute 10.101.62.1
traceroute to 10.101.62.1 (10.101.62.1), 32 hops max, 3 probe packets per hop, 84 byte packets
1 10.10.111.1 2.554 ms 3.221 ms 3.834 ms (hub ip)
2 10.10.111.3 12.219 ms 16.811 ms 13.925 ms (spoke tunnel ip)
3 10.101.62.1 18.478 ms 17.462 ms 16.482 ms  (endpoint)

 

FW01 (Internet) # execute traceroute-options source 10.103.113.2

FW01 (Internet) # execute traceroute 10.101.62.1
traceroute to 10.101.62.1 (10.101.62.1), 32 hops max, 3 probe packets per hop, 84 byte packets
1 10.103.113.1 1.066 ms 1.083 ms 1.069 ms (hub ip)
2 10.103.113.3 7.030 ms 7.114 ms 6.918 ms (spoke tunnel ip)
3 10.101.62.1 7.333 ms 6.657 ms 7.254 ms  (endpoint)

 

But if i use my laptop under spoke 1 i got this path

Tracing route to 10.101.62.1 over a maximum of 30 hops

1 <1 ms <1 ms <1 ms 10.100.50.1 (core gw ip)
2 8 ms <1 ms <1 ms 10.100.151.1 (spoke1 fgt ip)
3 8 ms 12 ms 9 ms 10.10.112.3 (spoke tunnel ip)
4 9 ms 10 ms 10 ms 10.101.62.1  (endpoint)

 

Seem when using my laptop then the traffic directly connectd to spoke2 without to hub.

But if why if traceroute from FGT the traffic always goes to hub first?

0 REPLIES 0
Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors