We have complete mystery situation. Two FortiGates has been connected one to each other via internal port 3. this ports have ip addresses as 18.104.22.168-2/24.
But they unable to ping each other!
When we issue show arp, we can see arp from second forti. But when we are trying to ssh we get : no route to host.
When we are using trace route, its shows trace like 127.0.0.1 ms H! (no route to host)
Policy set like permit ip any any.
How to ping directly connected fortigate ?
The diag debug flow is your friend, but I 'm guessing set allowaccess is not set up to allow ping ( show sys interface port3 from the cli )
'No route' is funny as assigning an IP address to a port automatically inserts a route to that subnet. Could you show us the routing table (Routing monitor)? Is the address mask on both FGTs correct?
on the routing monitor you should see 22.214.171.124 as connect, do you see that ?
FCSNP 5, JNCIS-FW,JNCIA-SSL ,MCSE, ITIL.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2023 Fortinet, Inc. All Rights Reserved.