@Ethan-TP This is from fortigate LAN subnet perspective. LAN of ER412 no response but vice versa ping is ok.

Thanks sir. I will try and follow your guide

@Ethan-TP Actually this is my setup current setup after update same problem. still i cant ping host at er7412-m2. or maybe acl config? previously i cant ping er7412-m2 Lan gateway when i configured...

@D-C Oh yes. I never thought of that. This will make things easier since the firewall will do everything. I will try that. Thanks

My setup is I have fortigate firewall interconnected to ER7412-M2 (LAN of fortiate to WAN of ER7412) I configured routing on both sides and firewall policy on fortigate to have communication to local...