Users segment cant reach server zone interface.

Hi All,

I'm working with my lab right now and having some issue with user segment reaching server zone interface.

Devices

Fortigate: 100D

Switch: 3850

Fortigate Configuration details:

Network Interface Port 1 (Created interface and zone)

int port1.400 (Outside interface)

allow ping http https snmp

assigned under outside zone

int port1.200 (Server interface)

allow ping http https snmp

assigned under Server zone

Routes Add static route to destination 192.168.10.0/24 to nexthop 172.1.1.2(Switch SVI)

Policy Create a policy from src zone outside to dst zone server that allow all ip and services.

Switch Configuration details:

ip routing

created vlan 400(for Outside interface). 10(for user sengment)

Create a SVI for vlan 400 with ip 172.1.1.2/24

Create a static route to 192.168.200.0/24 pointing to nexthop 172.1.1.1

No filtering configured on switch side.

What would be the possible issue? Attached the photo and ping test.

Ping result: From source server interface .200.254 can able to reach user segment.

While from user side .10.1 It can only reach SVI from switch 172.1.1.2

Diagram: https://forum.fortinet.com/tm.aspx?tree=true&m=159454&mpage=1

Thank you