Router on a stick on packet tracer

[achrafdotcisco]

Hello,

I have the following topology:

Every client on a VLAN can ping to the subinterfaces in the routers (Fortigate) but the clients can't ping each other between diffirent VLAN'S:

I use multiple VLAN's on each Switch example: on S3 vlan 50 Management and 60 IT:

Someone who can help me? Thanks a lot!

[balaji.bandi]

what you see on the logs of fortigate, when the you ping PC to PC ?

First thing need to check :

End device have correct gateway and subnet 

end device can ping their gateway

end device has any Firewall and it is disabled ?

From the router are you able to ping the end device IP address ?

if all tests and still not working post the below information for us to look into the issue.

Hope all the switches act as Layer 2 only ?

you have 2 Fortigate here in the diagram, how are they acting Active/Standby ?

[Georg Pauwen]

Hello,

post the zipped Packet Tracer project (.pkt) file...

[achrafdotcisco]

Hello,

Here you are.

Thank you!

[Georg Pauwen]

Hello,

what are the device passwords ?

[achrafdotcisco]

sorry i forgot it,

cisco and cisco123

[Georg Pauwen · Accepted solution]

Hello,

on the Fortigate, you have 'ip routing' disabled.

no ip cef
no ip routing

Enable 'ip routing':

Fortigate(config)#ip routing

[achrafdotcisco]

Thank so much @Georg Pauwen !!!

[Georg Pauwen]

Hello,

easy fix...good luck with your project, and happy new year !

[achrafdotcisco]

Thank you for your help,

Yes every End device have correct gateway and subnet given by the right DHCP pool from the 1941 routers (named:fortigate)

Every end device can ping their gateway

There is no Firewall (Fortigates are only 1941 routers not fortigates)

From the router i am able to ping the end device IP address.

All the switches act as Layer 2 only (2960)

Like i said for the 2 Fortigate in the diagram its only the name but those are Cisco 1941 routers.