Ping in Fortigate

My Fortiage can form a remote site with IPSec VPN succesfully.

However, under CLI console, it can only ping local IP but not the remote IP. Do I mean to expliclity specify the interface when I ping a remote IP through IPsec VPN ?

Currently, I run "execute ping x.x.x.x". Any idea ?

Thx

AXISHKAsked: 2017-03-26

Who is Participating?

Experts Exchange Solution brought to you by

Enjoy your complimentary solution view.

Get this solution by purchasing an Individual license! Start your 7-day free trial.

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

LVL 7

RaghavIT SpecialistCommented: 2017-03-27

Do you have ping enabled on Administrative Access on the Fortigate' s wan interface?

--Raghav.

LVL 75

Qlemo"Batchelor", Developer and EE Topic AdvisorCommented: 2017-03-27

That is irrelevant, Raghav. The remote IP is thought to be the private IP target of the tunnel ("ping a remote IP through IPsec VPN").

Usually providing the interface is optional, as long as routing/policy info is sufficient to know where to go. There is the issue of the source IP used, though - it might not be clear which one to use for FortiGate, so providing the corresponding interface or source IP could help.

Are you able to ping the remote IP from a local machine? If no, the issue is elsewhere, e.g. remote (personal) firewall inhibiting traffic from outside their LAN.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial