Fortinet white logo
Fortinet white logo

Cookbook

Policy and route checks

Policy and route checks

Policy route look up is prioritized over static and dynamic routes when doing a route look up in the GUI.

To look up an IPv4 route in the GUI:
  1. Go to Monitor > Routing Monitor.
  2. Click Route Lookup.

  3. Enter an IP address in the Destination field, then click Search.

    The matching IPv4 route is highlighted on the Route Monitor page.

To look up an IPv6 route in the GUI:
  1. Go to Monitor > Routing Monitor.
  2. Click Route Lookup.

  3. Enter an IPv6 address in the Destination field, then click Search.

    The matching IPv6 route is highlighted on the Route Monitor page.

To look up an IPv4 route in the CLI:
diagnose ip proute match <destination_ip_address> <source_ip_address> <interface_name> <protocol> <destination_port>

For example:

# diagnose ip proute match 10.100.21.44 2.2.2.2 port2 6 2
dst=10.100.21.44 src=2.2.2.2 iif=24 protocol=6 dport=2
id=7f00000c type=VWL
seq-num=12
# diagnose ip proute match 10.100.20.44 2.2.2.2 port2 6 2
dst=10.100.20.44 src=2.2.2.2 iif=24 protocol=6 dport=2
id=00000016 type=Policy Route
seq-num=22
To look up an IPv6 route in the CLI:
diagnose ipv6 proute match <destination_ipv6_address> <source_ipv6_address> <interface_name> <protocol> <destination_port>

Related Videos

sidebar video

Extended Route Test

  • 876 views
  • 5 years ago

Policy and route checks

Policy and route checks

Policy route look up is prioritized over static and dynamic routes when doing a route look up in the GUI.

To look up an IPv4 route in the GUI:
  1. Go to Monitor > Routing Monitor.
  2. Click Route Lookup.

  3. Enter an IP address in the Destination field, then click Search.

    The matching IPv4 route is highlighted on the Route Monitor page.

To look up an IPv6 route in the GUI:
  1. Go to Monitor > Routing Monitor.
  2. Click Route Lookup.

  3. Enter an IPv6 address in the Destination field, then click Search.

    The matching IPv6 route is highlighted on the Route Monitor page.

To look up an IPv4 route in the CLI:
diagnose ip proute match <destination_ip_address> <source_ip_address> <interface_name> <protocol> <destination_port>

For example:

# diagnose ip proute match 10.100.21.44 2.2.2.2 port2 6 2
dst=10.100.21.44 src=2.2.2.2 iif=24 protocol=6 dport=2
id=7f00000c type=VWL
seq-num=12
# diagnose ip proute match 10.100.20.44 2.2.2.2 port2 6 2
dst=10.100.20.44 src=2.2.2.2 iif=24 protocol=6 dport=2
id=00000016 type=Policy Route
seq-num=22
To look up an IPv6 route in the CLI:
diagnose ipv6 proute match <destination_ipv6_address> <source_ipv6_address> <interface_name> <protocol> <destination_port>