Skip to main content
Esteemed Contributor III
August 31, 2008
Question

Route a specific IP to a specific interface

  • August 31, 2008
  • 5 replies
  • 5365 views
We would like to connect a single specific IP address to a single specific Interface (WAN2) and Vice Versa. EG: all traffic to and from a single internal IP is routed via WAN2 What we have done: - Configure WAN2 and brought it up. - Configure Router Policy Force all traffic from internal IP address to WAN2 - Configure Firewall Policy To allow the traffic The internal computer is still connecting via the WAN1 interface Any suggestions would be appreciated.

    5 replies

    StefanK
    New Member
    September 1, 2008
    Hello, have you tried something along the lines config router static edit 0 set device " [Destination Port/VLAN here]" set dst [IP to be routed here] 255.255.255.255 set gateway [GW-IP here] next Best regards
    UkWizard
    New Member
    September 1, 2008
    You should use a policy route really, not a static route. have a second default route to the WAN2 gateway for all, but with a higer distance. create a policy route with the source IP and the WAN2 GW IP as the dest. that will do the trick. You may also need to setup ping servers on the two WAN interfaces.
    Esteemed Contributor III
    September 10, 2008
    may be better using policy route set two static route with ping active and same distance, so in any case you ave backup, set a default gateway in policy route for wan1 create a policy route with the source IP and the WAN2 GW IP as the dest it' s work also if one of the two link go down Ciao Andrea
    Esteemed Contributor III
    September 29, 2008
    Thanks to all for the help. You' ve certainly given us options to consider. We' ve been in touch with Fortinet Support. Here is there recommendation: ======== According to your config file no second gateway is configured. Policy route is not enough, you should add second default gateway. Please refer to the next article for more details and possible scenarios and choose what that suits your needs most http://kc.forticare.com/default.asp?id=376&SID=&Lang=1 ======== This seems to disagree with what has been posted here. Can anyone explain the reason for the difference? I suspect that Strifi is on the right track (2 static routes w/ ping active). Using a 2nd ISP for a redundant connection is our overall goal.
    UkWizard
    New Member
    September 29, 2008
    stefank' s answer is wrong, but both mine and Strifi' s posts would achieve this and is exactly what support said. the only difference is i recommended a higher distance rather than the same, and thats because you didnt mention you wanted to provide failover. and I find differing distances to be more stable.
    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT