IT Toolbox
Guide

How to ping from a FortiGate

Test the reachability of a destination directly from the FortiGate….

TopicFortiGate →
⌚ About 2 min read
View my favorites
FortiGate & VPN Intermediate. 3 min

Test the reachability of a destination directly from the FortiGate.

Avant de commencer : adaptez toujours les commandes et manipulations à votre environnement. Sur un système de production, prévoyez une backup ou un retour arrière lorsque l’action peut modifier la configuration.

Étapes à suivre

  1. 1

    Open the LTB.

    Log in with an authorized account.

  2. 2

    Launch a simple ping.

    Use the destination tracking service.

  3. 3

    Select a source if necessary.

    For some multi-interface diagnostics, set ping options.

  4. 4

    Reset Options.

    Avoid keeping any unsolicited source options for the following tests.

Commands utiles

M.P. 8.8.
MELP-options view-

À retenir

  • The result from the FortiGate may differ from the traffic of a post due to the policies, NAT or routing.
  • Ping can be filtered while a service is working.
← All les guides
Technical deep dive

FortiGate ping: test source changes the diagnosis

Technical checkpoints

  • execute ping uses FortiGate routing; without an explicit source, the chosen source address can differ from the LAN/VPN being diagnosed.
  • execute ping-options source more faithfully reproduces traffic from an interface or tunnel.
  • Blocked ICMP

Source-aware test

Set the expected source, verify the route, then run ping.

execute ping-options source 192.168.1.1
execute ping 8.8.8.8

Topic-specific pitfalls

  • Forgetting to reset ping-options can skew later tests.
  • An ICMP reply validates neither DNS nor the application service.

How to validate

  • Route and source match the flow being diagnosed.
  • An application-level test is then performed using the actual protocol.
♡ 0