Skip to main content
Israt24Fortinet
New Member
Mar 13, 2024 7:52 AM UTC
Solved

static route

Hello! In a normal connection (like internet - router - firewall - LAN device) the destination is the default route 0.0.0.0/0.0.0.0.

1) what does it mean by named address?

2) In which case we do not use the default route? 

3) for what purpose we select internet service option?

4) for IPSec VPN, is it mandatory to use blackhole as the interface?

ozkanaltas
Valued Contributor III
Mar 13, 2024 8:21 AM UTC

Hello @Israt24Fortinet ,

 

1- You can use an address object instead of the IP address on the route configuration.

2- If you know all unknown destination addresses on the internet. You don't need to use default route.

You can find, more information about the routing concept.

 

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/139692/routing-concepts

 

3- You can find more information about internet service in this link. 

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/849970/internet-services

4-No need to configure the blackhole interface.

1 reply

ozkanaltas
Valued Contributor III
Mar 13, 2024 8:21 AM UTC

Hello @Israt24Fortinet ,

 

1- You can use an address object instead of the IP address on the route configuration.

2- If you know all unknown destination addresses on the internet. You don't need to use default route.

You can find, more information about the routing concept.

 

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/139692/routing-concepts

 

3- You can find more information about internet service in this link. 

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/849970/internet-services

4-No need to configure the blackhole interface.

Risk and Resilience in the Age of AI. An OT Thought Leadership Summit for Houston's Critical Infrastructure Leaders. Date: Thursday, December 3, 2026. Time: 8:30 am - 1:30 pm (CT). Location: The Westin Houston, Memorial City | 945 Gessner Road, Houston, TX 77024