Policy routing trouble

[snakekick]

Hello,

i have some trouble with policy routing.

I have try to paint my setup to the picture.

Virtual IP and nat and policy all working when i use static route but when i change to policy routing it doesn't

work and i didnt see my fault.

here my Policy routing config, static roules are deleted:

edit 4

set input-device "port24"

set dst "10.0.0.1/255.255.255.255"

set protocol 6

set start-port 80

set end-port 80

set output-device "VLAN1"

edit 5 set input-device "port18"

set dst "10.0.0.2/255.255.255.255"

set protocol 6

set start-port 22

set end-port 22

set output-device "VLAN1"

i hope someone can help me

[Toshi_Esumi]

That's what I was trying to say in the first comment. You have to have multiple routes.  "reverse path check fail, drop" means when the traffic comes in from outside it checked the returning route and since FGT didn't see it it was dropped.

You have to have two default routes to both outside ports. If you want to let all other traffic to choose one side over the other for inside-initated-outgoing traffic, you can use priority (higher number has lower priority).