Access to forti Switch via VIP

[tedew]

hello,

I would like to monitor my FortiSwitches by monitoring tool - very simple monitor - PING only.

Fortiswitches (and fortilink) has subnet 169.254.x.x assigned.

I created VIP 10.0.0.6 -> 169.254.0.6

edit "my_test"
set uuid 3017f34e-b6a0-52ed-113f-ade8e24e1f9e
set extip 10.0.0.6
set mappedip "169.254.0.6"
set extintf "any"
set color 6

I cretaed a rule in FW  

onfig firewall policy
edit 69
set name "VIP-TO-Fortilink"
set uuid d6aa99f5-b6ad-51ed-1795-8ba45bfa3456
set srcintf "vlan int"
set dstintf "fortilink"
set action accept
set srcaddr "vxx-IT"
set dstaddr "all"
set schedule "always"
set service "ALL"
set nat enable
next

but ping don't work, even from Fotigate directly

Something more I have to set ?? 

Thank You

[ebilcari]

This IP range is non routable 169.254.x.x. If you want to reach external destinations from the switch you have to specify a private IP range for the FortiLink (recommended way).

for example: