Transparent mode installation

Transparent mode configuration examples

 

 

This section describes:

Default routes and static routes

Example default route to an external network

Example static route to an external destination

Example static route to an internal destination

Default routes and static routes

To create a route to a destination, you need to define an IP prefix which consists of an IP network address and a corresponding netmask value. A default route matches any prefix and forwards traffic to the next hop router (otherwise known as the default gateway). A static route matches a more specific prefix and forwards traffic to the next hop router.

Default route example

:

IP Prefix 0.0.0.0 (IP address)

0.0.0.0(Netmask)

Next Hop 192.168.1.2

Static Route example

IP Prefix 172.100.100.0 (IP address) 255.255.255.0 (Netmask)

Next Hop 192.168.1.2

Note: When adding routes to the FortiGate unit, add the default route last so that it appears on the bottom of the route list. This makes sure that the unit attempts to match more specific routes before selecting the default route.

Example default route to an external network

Figure 11 shows a FortiGate unit where all destinations, including the management computer, are located on the external network. To reach these destinations, the FortiGate unit must connect to the “upstream” router leading to the external network. To facilitate this connection, you must enter a single default route that points to the upstream router as the next hop/default gateway.

FortiGate-800 Installation and Configuration Guide

65

Page 65
Image 65
Fortinet FortiGate-800 manual Default routes and static routes, Example default route to an external network