FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
mpeddalla
Staff
Staff
Article Id 274122
Description This article describes how to create a static route on FortiGate from the GUI Interface.
Scope FortiGate.
Solution

In GUI, go to Network -> Static Routes and select 'Create New'.

As shown in the below diagram, give the destination address and gateway IP along with the interface.

 

In the below example, a default static route has been created for internet access. So the destination address will be 0.0.0.0/0.0.0.0:

 

chrome_4H6Nuzypep.png

 

Expand the Advanced Options to check the Priority of this route:

 

priority.PNG

 

 

Destination Address:

0.0.0.0/0.0.0.0 is the default route, meaning the route will be used for any traffic not matching more specific routes.


Gateway IP:
The IP address of the next-hop device ( ISP's router or another upstream device).

Interface:

The physical or logical interface (e.g., wan1, port1) that connects to the next hop. This defines through which interface the traffic should exit the FortiGate.

Administrative Distance (AD):

A metric value to prioritize the route. By default, static routes on FortiGate have an AD of 10. Lower values indicate higher priority.

 

Priority: 

This is an advanced setting used by the FortiGate kernel. Routes with a larger value will have a lower priority. The routes with same priority will be considered as ECMP. 'Priority' can only be customized for statically configured routes. The priority of routes dynamically learned from routing protocols will always be 1.

 

Once all the details are provided, select 'ok' to see the static route in the GUI:

 

chrome_VpODUUc3sg.png

 

From CLI:

 

chrome_htblvRZWvl.png

 

To verify the static route in the routing table run the below command:

 

get router info routing-table all 

 

chrome_JVESHAYGiD.png

 

Verify the pings to the internet:

 

Ornstein-kvm35 # get router info routing-table details 8.8.8.8

Routing table for VRF=0
Routing entry for 0.0.0.0/0
Known via "static", distance 10, metric 0, best
* vrf 0 10.9.15.254, via port1

 

Ornstein-kvm35 # execute ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8): 56 data bytes
64 bytes from 8.8.8.8: icmp_seq=0 ttl=121 time=6.3 ms
64 bytes from 8.8.8.8: icmp_seq=1 ttl=121 time=6.1 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=121 time=6.2 ms
64 bytes from 8.8.8.8: icmp_seq=3 ttl=121 time=6.3 ms
64 bytes from 8.8.8.8: icmp_seq=4 ttl=121 time=6.1 ms

--- 8.8.8.8 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max = 6.1/6.2/6.3 ms