New Member

Question

Route Distance

Forum|Forum|7 years ago
February 21, 2019
11 replies
20063 views

Hi,

Probably a dumb question but here goes.

I have a vdom which receives a 0/0 from bgp:

B *> 0.0.0.0/0 [20/0] via 10.238.2.201, xxxxx, 1d00h23m

I also have an IPSec tunnel which i want to send internet traffic to from certain subnets, so im going to configure policy routing.

But without having the 0/0 route active in the routing table towards the tunnel interface the policy route wont work.

When trying to add a static 0/0 route towards the tunnel interface with the same distance as BGP i get this:

get router info routing-table database

S *> 0.0.0.0/0 [20/0] is directly connected, tunnel1 B 0.0.0.0/0 [20/0] via 10.238.2.201, lan, 1d00h22m

The static always is active though they have the same distance. I was able to go round this by configuring ip addresses on the tunnel interfaces and in the policy route adding the ip of the remote end as gateway, but is there a way to have both routes (BGP,Static) active in the routing table?

Thanks

ede_pfau

SuperUser

there's nothing like a [strike]free lunch[/strike] dumb question.

If I see this correctly you do have both routes in the routing table at the same time. That's because both have the same distance. If you want to have one preferred over the other, change it's priority. In FortiOS, "priority" == "cost", so a route with higher priority will be used less.

snakethingAuthor

New Member

Actually i want both routes active in the routing table.

When i create the static with the same distance as the BGP one, the static is active.

And was wondering if there is a way to have the BGP and static route active in the routing table.

ede_pfau

SuperUser

Both should be active actually, if both distances are identical. The keyword is ECMP here. In your case you would want all traffic follow the BGP route, and to have the static route in the table so that policy routing works for those source networks.

Thus, the priorities should differ, the lesser one on the BGP route.

gradius85

New Member

I thought BGP only influences return traffic from the ISP, and you still use a static route with different metrics to select the best route at the time.

Toshi_Esumi

SuperUser

Based on the fact you showed in the "database", setting distance doesn't seem to be enough to show both in the routing table. Probably FGT is picking up the static route over the BGP route with the same distance.

I think you have to set two static routes to both tunnel0 and lan (with the GW for this side) with the same distance.

But policy routes should work, as you're experiencing, as long as both are in the database. I'm not 100% sure though because I haven't tested it myself. But appear to be right based on what you described.

snakethingAuthor

New Member

Yes this is exactly what is happening , the FGT is picking up the static over the bgp route though they have the same distance.

Unfortunately i have to use the BGP route for the rest of the traffic due to diversity of the network and not go with static.

Any ideas why this might be happening cause in the docs its pretty straight forward that ay route sharing the same distance should be present in the table.

Thanks

Sign up

Login with SSO

Login to the community

Login with SSO