Skip to main content
Israt24Fortinet
New Member
March 13, 2024
Solved

static route

  • March 13, 2024
  • 1 reply
  • 1309 views

Hello! In a normal connection (like internet - router - firewall - LAN device) the destination is the default route 0.0.0.0/0.0.0.0.

1) what does it mean by named address?

2) In which case we do not use the default route? 

3) for what purpose we select internet service option?

4) for IPSec VPN, is it mandatory to use blackhole as the interface?

Best answer by ozkanaltas

Hello @Israt24Fortinet ,

 

1- You can use an address object instead of the IP address on the route configuration.

2- If you know all unknown destination addresses on the internet. You don't need to use default route.

You can find, more information about the routing concept.

 

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/139692/routing-concepts

 

3- You can find more information about internet service in this link. 

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/849970/internet-services

4-No need to configure the blackhole interface.

1 reply

ozkanaltas
Valued Contributor III
March 13, 2024

Hello @Israt24Fortinet ,

 

1- You can use an address object instead of the IP address on the route configuration.

2- If you know all unknown destination addresses on the internet. You don't need to use default route.

You can find, more information about the routing concept.

 

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/139692/routing-concepts

 

3- You can find more information about internet service in this link. 

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/849970/internet-services

4-No need to configure the blackhole interface.