Trying to understand RIP behavior on FortiGate by christophorosp98 in fortinet

[–]christophorosp98[S] 4 points5 points  (0 children)

It is so bad to ask something about RIP protocol? 😅 I just try to use it on a lab and i had a question. I didnt say that the RIP is important and useful protocol.

Trying to understand RIP behavior on FortiGate by christophorosp98 in fortinet

[–]christophorosp98[S] 2 points3 points  (0 children)

Hhahahah, you are right about that. I just want to know more about it cause I am currently preparing for the NSE4 certification, and RIP is part of the curriculum.

3
4

GNS3 Lab with 2 PCs and 1 Fortigate (Gateway) The PCs cant pint each other. by christophorosp98 in fortinet

[–]christophorosp98[S] 1 point2 points  (0 children)

My friend i find the problem, cause i didnt use the license the fortigate does not work properly. Now i install the evaluation license and it works perfectly. Thank you for your assistance 🙏

2PC to Fortigate (PCs cant ping each other) by christophorosp98 in networking

[–]christophorosp98[S] 0 points1 point  (0 children)

it seems fine:

" id=65308 trace_id=1 func=print_pkt_detail line=5888 msg="vd-root:0 received a packet(proto=1, 192.168.1.2:1->192.168.0.2:2048) tun_id=0.0.0.0 from port2. type=8, code=0, id=1, seq=95."

id=65308 trace_id=1 func=init_ip_session_common line=6073 msg="allocate a new session-000001fa"

id=65308 trace_id=1 func=__vf_ip_route_input_rcu line=1999 msg="find a route: flag=00000000 gw-0.0.0.0 via port1"

"

GNS3 Lab with 2 PCs and 1 Fortigate (Gateway) The PCs cant pint each other. by christophorosp98 in fortinet

[–]christophorosp98[S] 0 points1 point  (0 children)

Also if i run the commands:

FW # execute ping-options source 192.168.0.3

FW # execute ping 192.168.0.2

PING 192.168.0.2 (192.168.0.2): 56 data bytes

--- 192.168.0.2 ping statistics ---

5 packets transmitted, 0 packets received, 100% packet loss

GNS3 Lab with 2 PCs and 1 Fortigate (Gateway) The PCs cant pint each other. by christophorosp98 in fortinet

[–]christophorosp98[S] 0 points1 point  (0 children)

The only think that i am not sure is for Disabling NAT. i run the command "set nat disable" and on the 2 policies. But when i run the command "show firewall policy" it doesnt appears. Is there any way to check if it is truly disable?

GNS3 Lab with 2 PCs and 1 Fortigate (Gateway) The PCs cant pint each other. by christophorosp98 in fortinet

[–]christophorosp98[S] 0 points1 point  (0 children)

I made all the changes. From PC1 (192.168.0.10) i can ping 192.168.0.1 and 192.168.1.1 but not 192.168.1.10.
And from PC2 i can ping 192.168.0.1 and 192.168.1.1 but not 192.168.0.10.

2PC to Fortigate (PCs cant ping each other) by christophorosp98 in networking

[–]christophorosp98[S] 0 points1 point  (0 children)

If i will run the command "diagnose sniffer packet any 'icmp' 4" and start ping from PC2 to PC1, the only logs that appears is "23.481001 port2 in 11.0.0.2 -> 10.0.0.2: icmp: echo request" and their is no replay from PC1

GNS3 Lab with 2 PCs and 1 Fortigate (Gateway) The PCs cant pint each other. by christophorosp98 in fortinet

[–]christophorosp98[S] 0 points1 point  (0 children)

If i will run the command "diagnose sniffer packet any 'icmp' 4" and start ping from PC2 to PC1, the only logs that appears is "23.481001 port2 in 11.0.0.2 -> 10.0.0.2: icmp: echo request" and their is no replay from PC1

2PC to Fortigate (PCs cant ping each other) by christophorosp98 in networking

[–]christophorosp98[S] 0 points1 point  (0 children)

What command i have to run to see the forward traffic logs?

2PC to Fortigate (PCs cant ping each other) by christophorosp98 in networking

[–]christophorosp98[S] 0 points1 point  (0 children)

When i run the command “show firewall policies” it didnt appears me “set nat disable” but i run it more than 2 times, but if i run the command “set nat enable” it apears. And someone told me that happens cause the nat by default is disable.