Description | This article describes how to create a static route on FortiGate from the GUI Interface. |
Scope | FortiGate. |
Solution |
In GUI, go to Network -> Static Routes and select 'Create New'. As shown in the below diagram, give the destination address and gateway IP along with the interface.
In the below example, a default static route has been created for internet access. So the destination address will be 0.0.0.0/0.0.0.0:
Expand the Advanced Options to check the Priority of this route:
Destination Address: 0.0.0.0/0.0.0.0 is the default route, meaning the route will be used for any traffic not matching more specific routes.
Interface: The physical or logical interface (e.g., wan1, port1) that connects to the next hop. This defines through which interface the traffic should exit the FortiGate. A metric value to prioritize the route. By default, static routes on FortiGate have an AD of 10. Lower values indicate higher priority.
Priority: This is an advanced setting used by the FortiGate kernel. Routes with a larger value will have a lower priority. The routes with same priority will be considered as ECMP. 'Priority' can only be customized for statically configured routes. The priority of routes dynamically learned from routing protocols will always be 1.
Once all the details are provided, select 'ok' to see the static route in the GUI:
From CLI:
To verify the static route in the routing table run the below command:
get router info routing-table all
Verify the pings to the internet: Ornstein-kvm35 # get router info routing-table details 8.8.8.8 Routing table for VRF=0
Ornstein-kvm35 # execute ping 8.8.8.8 --- 8.8.8.8 ping statistics --- |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.