I'm doing the following network setup (first time with firewall) but it's not working, unsure where its going wrong.

I have a Fortigate VM firewall port 1 IP on vmnet8(NAT) in VMWare, host vmnet8 IP is, guest VM IP is issued by DHCP from firewall (working).

I have a static route between firewall and host vmnet

The firewall VM and guest Vm can ping host vmnet8 interface but do not gain internet access.

I have created a policy to allow WAN on LAN IPs (guest VM).

Anything I'm missing.

Thank You

Guest VM IP

WAN & LAN IP settings

Static Route between firewall port 1 and host vmnet8

Internet Policy

Host vmnet8 IP


This is now resolved.

What happened was I was setting manual IP addresses of both the WAN port 1 and the static route gateway as IP address of laptop vmnet8 which is

What I tried was let the DHCP assign the WAN port IP and also let the static route get the IP dynamically (this was an option in the static route only showing when I allow DHCP IP assignment to WAN port 1..

I saw that the dynamically assigned static route IP is (my laptop vmnet8 IP is, now I'm just not understanding who is assigning this IP to the static route, if its the VMware DHCP then how or to what is it getting assigned to or is it just a thing between VMWare and Fortigate.

What I have noticed is that the DHCP IP of WAN is and not or 3 or 4 etc, I have tested this twice.

A tracert from the guest client VM


Tracing route to google-public-dns-a.google.com []
over a maximum of 30 hops:

  1   <1 ms   <1 ms   <1 ms
  2   <1 ms   <1 ms   <1 ms >>> IP first assigned dynamically by fortigate, then I set the same IP manually and it works.
  3   22 ms   5 ms   6 ms
  4   6 ms   14 ms   14 ms
  5   26 ms   20 ms   21 ms
  6   *     22 ms   18 ms
  7   *     36 ms   25 ms
  8   37 ms   79 ms   16 ms
  9   15 ms   25 ms   17 ms
10   17 ms   20 ms   15 ms google-public-dns-a.google.com []

Trace complete.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.