Technical Tip: How to create a static route on
FortiGate from the GUI Interface
Descrip This article describes how to create a static route on
tion FortiGate from the GUI Interface.
Scope FortiGate.
Solutio In GUI, go to Network -> Static Routes and select 'Create
n New'.
As shown in the below diagram, give the destination address and
gateway IP along with the interface.
In the below example, a default static route has been created for
internet access. So the destination address will
be 0.0.0.0/0.0.0.0:
Expand the Advanced Options to check the Priority of this
route:
Destination Address:
0.0.0.0/0.0.0.0 is the default route, meaning the route will be
used for any traffic not matching more specific routes.
Gateway IP:
The IP address of the next-hop device ( ISP's router or another
upstream device).
Interface:
The physical or logical interface (e.g., wan1, port1) that connects
to the next hop. This defines through which interface the traffic
should exit the FortiGate.
Administrative Distance (AD):
A metric value to prioritize the route. By default, static routes on
FortiGate have an AD of 10. Lower values indicate higher
priority.
Priority:
This is an advanced setting used by the FortiGate kernel. Routes
with a larger value will have a lower priority. The routes with
same priority will be considered as ECMP. 'Priority' can only be
customized for statically configured routes. The priority of routes
dynamically learned from routing protocols will always be 1.
Once all the details are provided, select 'ok' to see the static
route in the GUI:
From CLI:
To verify the static route in the routing table run the below
command:
get router info routing-table all
Verify the pings to the internet:
Ornstein-kvm35 # get router info routing-table details
8.8.8.8
Routing table for VRF=0
Routing entry for 0.0.0.0/0
Known via "static", distance 10, metric 0, best
* vrf 0 10.9.15.254, via port1
Ornstein-kvm35 # execute ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8): 56 data bytes
64 bytes from 8.8.8.8: icmp_seq=0 ttl=121 time=6.3 ms
64 bytes from 8.8.8.8: icmp_seq=1 ttl=121 time=6.1 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=121 time=6.2 ms
64 bytes from 8.8.8.8: icmp_seq=3 ttl=121 time=6.3 ms
64 bytes from 8.8.8.8: icmp_seq=4 ttl=121 time=6.1 ms
--- 8.8.8.8 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet
loss
round-trip min/avg/max = 6.1/6.2/6.3 ms
….……………
Technical Tip: Configure RIP routing protocol in
FortiGate
Description
This article allows for a visual guide of RIP configuration in FortiGate GUI on a
single FortiGate.
RIP is normally used in small and medium-sized networks.
Scope
FortiGate.
Solution
RIP can be accessed in GUI and these are the available options as default:
For interfaces, use 'Create new' to add all the interfaces involved in RIP traffic.
Use/ enable 'Passive' only for the local LAN interface, for which this unit is the
default gateway (no routing table needs to be propagated there).
After this change, it is possible to see the routing protocol being used, and the
current settings.
For example:
Redistribution of routes learned via static/ dynamic routing protocols into RIP
can be configured from the Advanced options.
