VIP Behavior

[AUT_Maverick]

I have created VIP objects on the Fortigate. Since I am in the process of replacing another firewall with the Fortigate. Now I have experienced the following phenomenon. Every request is sent to the Fortigate and not to the other firewall running in parallel. How can this be that the Fortigate gets these requests although I have not yet created a policy just the VIP Objects?

[saneeshpv_FTNT · Accepted solution]

Hi,

Once you create a VIP object in the FortiGate it will start performing ARP reply as this VIP now belongs to Fortigate. You may disable ARP for that VIP.

# config firewall vip
    edit <name>
        set arp-reply disable (default: enable)
    next
end

https://community.fortinet.com/t5/FortiGate/Technical-Tip-ARP-reply-setting-in-Virtual-IP-IP-Pool/ta...

Best Regards,