Fortinet Essential Configuration Techniques for FortiGate Network Cards

Network configuration Configuring routing

Adding destination-based routes to the routing table

You can add destination-based routes to the FortiGate routing table to control the destination of traffic exiting the FortiGate unit. You configure routes by adding destination IP addresses and netmasks and adding gateways for these destination addresses. The gateways are the next hop routers to which to route traffic that matches the destination addresses in the route.

You can add one or two gateways to a route. If you add one gateway, the FortiGate unit routes the traffic to that gateway. You can add a second gateway to route traffic to the second gateway if the first gateway fails.

To support routing failover, the IP address of each gateway must be added to the ping server of the interface connected to the same network as the gateway. For information about adding a ping server, see “Adding a ping server to an interface” on page 97.

To add destination-based routes to the routing table

1Go to System > Network > Routing Table.

2Select New to add a new route.

3Type the Destination IP address and netmask for the route.

4Add the IP address of Gateway #1.

Gateway #1 is the IP address of the primary destination for the route. Gateway #1 must be on the same subnet as a Fortigate interface.

If you are adding a static route from the FortiGate unit to a single destination router, you need to specify only one gateway.

5Add the IP address of Gateway #2, if you want to route traffic to multiple gateways.

6Set Device #1 to the FortiGate interface through which you want to route traffic to connect to Gateway #1.

You can select the name of an interface or Auto (the default). If you select the name of an interface, the traffic is routed to that interface. If you select Auto the system selects the interface according to the following rules:

•If the Gateway #1 IP address is on the same subnet as a FortiGate interface, the system sends the traffic to that interface.

•If the Gateway #1 IP address is not on the same subnet as a FortiGate interface, the system routes the traffic to the external interface, using the default route.

You can use Device #1 to send packets to an interface that is on a different subnet than the destination IP address of the packets without routing them using the default route.

FortiGate-50A Installation and Configuration Guide 101