Route a specific IP to a specific interface

[#1]

We would like to connect a single specific IP address to a single specific Interface (WAN2) and Vice Versa. EG: all traffic to and from a single internal IP is routed via WAN2 What we have done: - Configure WAN2 and brought it up. - Configure Router Policy Force all traffic from internal IP address to WAN2 - Configure Firewall Policy To allow the traffic The internal computer is still connecting via the WAN1 interface Any suggestions would be appreciated.

[StefanK]

Hello, have you tried something along the lines config router static edit 0 set device " [Destination Port/VLAN here]" set dst [IP to be routed here] 255.255.255.255 set gateway [GW-IP here] next Best regards

[UkWizard]

You should use a policy route really, not a static route. have a second default route to the WAN2 gateway for all, but with a higer distance. create a policy route with the source IP and the WAN2 GW IP as the dest. that will do the trick. You may also need to setup ping servers on the two WAN interfaces.

[#4]

may be better using policy route set two static route with ping active and same distance, so in any case you ave backup, set a default gateway in policy route for wan1 create a policy route with the source IP and the WAN2 GW IP as the dest it' s work also if one of the two link go down Ciao Andrea

[#5]

Thanks to all for the help. You' ve certainly given us options to consider. We' ve been in touch with Fortinet Support. Here is there recommendation: ======== According to your config file no second gateway is configured. Policy route is not enough, you should add second default gateway. Please refer to the next article for more details and possible scenarios and choose what that suits your needs most http://kc.forticare.com/default.asp?id=376&SID=&Lang=1 ======== This seems to disagree with what has been posted here. Can anyone explain the reason for the difference? I suspect that Strifi is on the right track (2 static routes w/ ping active). Using a 2nd ISP for a redundant connection is our overall goal.

[UkWizard]

stefank' s answer is wrong, but both mine and Strifi' s posts would achieve this and is exactly what support said. the only difference is i recommended a higher distance rather than the same, and thats because you didnt mention you wanted to provide failover. and I find differing distances to be more stable.