FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
ppatel
Staff
Staff
Article Id 193629

Description

 

This article describes how to view the Routing table on Secondary/subordinate units in an HA cluster.

 

Scope

 

FortiGate.


Solution

 

  • The routing table is not synchronized between the HA Cluster members. The route output will show empty. 
  • Due to that, the following command will not produce the same output on any secondary units as it will on the primary unit.

 

get router info routing-table all

get router info routing-table details

 

  • FIB is synchronized between the HA Cluster members.
  • After an HA failover, the packets are forwarded immediately because the FIB is synchronized.
  • Use one of the following commands to view the kernel routing table (FIB). The command's output will display a list of resolved routes actually being used by the FortiOS kernel. The output of this command should be the same on the primary unit and the subordinate units.

 

diagnose ip route list
get router info kernel


Primary HA unit:

 
 
Secondary/subordinate HA unit: