Replacing A Firewall. Keep the same IP for new firewall

I am replacing an existing Fortigate firewall that is currently at I would like the new firewall to have the same ip address as the old firewall.

Before I replaced the old firewall, I verified that I could successfully ping it from a system with the ip address of

I configured the new firewall and first connected it directly to a PC with (same subnet) address to verify that I could reach it via ping and via the admin interface of the new firewall so I know the configuration is correct.

I added the new firewall to our network by unplugging the old firewall and connecting the new firewall to the same port on the 3560 switch.

I added the hardware mac address of the new firewall to the 3560 switch using the commands:

configure terminal
mac-address-table static 0013.7233.b6ae vlan 201 interface fastEthernet 0/1

Open in new window

and verified that the mac address was added using:
show mac-address table vlan

Open in new window

(I used Wireshark and ping to verify the mac address of the new firewall).

I can not ping the new firewall at from like I was expecting.

I would expect that If the new firewall is configured to use the same address as the old firewall and I added a static entry for the mac address to the switch that the switch would see the firewall.

Is there anything I am missing here?

Any suggestions?
Who is Participating?
gt2847cConnect With a Mentor Commented:
Does the new firewall have a route for the 192.168.1.x network?  If it does not, it may be trying to reply to your ping out the wrong interface (default route)...  You may need to add a static route to your new firewall.
Blackhawk_ChurchAuthor Commented:
That did the trick!! Thanks.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.