Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    6.2.5
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.16
    7.0.15
    7.0.14
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.15
    6.4.14
    6.4.13
    6.4.12
    6.4.11
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.2.16
    6.2.15
    6.2.14
    6.2.13
    6.2.12
    6.2.11
    6.2.10
    6.2.9
    6.2.8
    6.2.7
    6.2.6
    6.2.5
    6.2.4
    6.2.3
    6.2.2
    6.2.1
    6.0.0
    5.6.0
    5.4.0
    5.2.0
    5.0.0

    router route-map

    Configure route maps.

      config router route-map
      Description: Configure route maps.
      edit <name>
          set comments {string}
          config rule
              Description: Rule.
              edit <id>
                  set action [permit|deny]
                  set match-as-path {string}
                  set match-community {string}
                  set match-community-exact [enable|disable]
                  set match-origin [none|egp|...]
                  set match-interface {string}
                  set match-ip-address {string}
                  set match-ip6-address {string}
                  set match-ip-nexthop {string}
                  set match-ip6-nexthop {string}
                  set match-metric {integer}
                  set match-route-type [1|2|...]
                  set match-tag {integer}
                  set set-aggregator-as {integer}
                  set set-aggregator-ip {ipv4-address-any}
                  set set-aspath-action [prepend|replace]
                  set set-aspath <as1>, <as2>, ...
                  set set-atomic-aggregate [enable|disable]
                  set set-community-delete {string}
                  set set-community <community1>, <community2>, ...
                  set set-community-additive [enable|disable]
                  set set-dampening-reachability-half-life {integer}
                  set set-dampening-reuse {integer}
                  set set-dampening-suppress {integer}
                  set set-dampening-max-suppress {integer}
                  set set-dampening-unreachability-half-life {integer}
                  set set-extcommunity-rt <community1>, <community2>, ...
                  set set-extcommunity-soo <community1>, <community2>, ...
                  set set-ip-nexthop {ipv4-address}
                  set set-ip6-nexthop {ipv6-address}
                  set set-ip6-nexthop-local {ipv6-address}
                  set set-local-preference {integer}
                  set set-metric {integer}
                  set set-metric-type [1|2|...]
                  set set-originator-id {ipv4-address-any}
                  set set-origin [none|egp|...]
                  set set-tag {integer}
                  set set-weight {integer}
                  set set-flags {integer}
                  set match-flags {integer}
                  set set-route-tag {integer}
              next
          end
      next
  end

    config router route-map

    Parameter Name Description Type Size
    comments Optional comments. string Maximum length: 127

    config rule

    Parameter Name Description Type Size
    action Action.
    permit: Permit.
    deny: Deny.
    		 option -
    match-as-path Match BGP AS path list. string Maximum length: 35
    match-community Match BGP community list. string Maximum length: 35
    match-community-exact Enable/disable exact matching of communities.
    enable: Enable exact matching of communities.
    disable: Disable exact matching of communities.
    		 option -
    match-origin Match BGP origin code.
    none: None.
    egp: Remote EGP.
    igp: Local IGP.
    incomplete: Unknown heritage.
    		 option -
    match-interface Match interface configuration. string Maximum length: 15
    match-ip-address Match IP address permitted by access-list or prefix-list. string Maximum length: 35
    match-ip6-address Match IPv6 address permitted by access-list6 or prefix-list6. string Maximum length: 35
    match-ip-nexthop Match next hop IP address passed by access-list or prefix-list. string Maximum length: 35
    match-ip6-nexthop Match next hop IPv6 address passed by access-list6 or prefix-list6. string Maximum length: 35
    match-metric Match metric for redistribute routes. integer Minimum value: 0 Maximum value: 4294967295
    match-route-type Match route type.
    1: External type 1.
    2: External type 2.
    none: No type specified.
    		 option -
    match-tag Match tag. integer Minimum value: 0 Maximum value: 4294967295
    set-aggregator-as BGP aggregator AS. integer Minimum value: 0 Maximum value: 4294967295
    set-aggregator-ip BGP aggregator IP. ipv4-address-any Not Specified
    set-aspath-action Specify preferred action of set-aspath.
    prepend: Prepend.
    replace: Replace.
    		 option -
    set-aspath <as> Prepend BGP AS path attribute.
    AS number (0 - 42949672). NOTE: Use quotes for repeating numbers, e.g.: "1 1 2"
    string Maximum length: 79
    set-atomic-aggregate Enable/disable BGP atomic aggregate attribute.
    enable: Enable BGP atomic aggregate attribute.
    disable: Disable BGP atomic aggregate attribute.
    		 option -
    set-community-delete Delete communities matching community list. string Maximum length: 35
    set-community <community> BGP community attribute.
    Attribute: AA    		 AA:NN internet local-AS no-advertise no-export. string Maximum length: 79
    set-community-additive Enable/disable adding set-community to existing community.
    enable: Enable adding set-community to existing community.
    disable: Disable adding set-community to existing community.
    		 option -
    set-dampening-reachability-half-life Reachability half-life time for the penalty (1 - 45 min, 0 = unset). integer Minimum value: 0 Maximum value: 45
    set-dampening-reuse Value to start reusing a route (1 - 20000, 0 = unset). integer Minimum value: 0 Maximum value: 20000
    set-dampening-suppress Value to start suppressing a route (1 - 20000, 0 = unset). integer Minimum value: 0 Maximum value: 20000
    set-dampening-max-suppress Maximum duration to suppress a route (1 - 255 min, 0 = unset). integer Minimum value: 0 Maximum value: 255
    set-dampening-unreachability-half-life Unreachability Half-life time for the penalty (1 - 45 min, 0 = unset) integer Minimum value: 0 Maximum value: 45
    set-extcommunity-rt <community> Route Target extended community.
    AA:NN.    		 string Maximum length: 79
    set-extcommunity-soo <community> Site-of-Origin extended community.
    AA:NN    		 string Maximum length: 79
    set-ip-nexthop IP address of next hop. ipv4-address Not Specified
    set-ip6-nexthop IPv6 global address of next hop. ipv6-address Not Specified
    set-ip6-nexthop-local IPv6 local address of next hop. ipv6-address Not Specified
    set-local-preference BGP local preference path attribute. integer Minimum value: 0 Maximum value: 4294967295
    set-metric Metric value. integer Minimum value: 0 Maximum value: 4294967295
    set-metric-type Metric type.
    1: External type 1.
    2: External type 2.
    none: No type specified.
    		 option -
    set-originator-id BGP originator ID attribute. ipv4-address-any Not Specified
    set-origin BGP origin code.
    none: None.
    egp: Remote EGP.
    igp: Local IGP.
    incomplete: Unknown heritage.
    		 option -
    set-tag Tag value. integer Minimum value: 0 Maximum value: 4294967295
    set-weight BGP weight for routing table. integer Minimum value: 0 Maximum value: 4294967295
    set-flags BGP flags value (0 - 65535) integer Minimum value: 0 Maximum value: 65535
    match-flags BGP flag value to match (0 - 65535) integer Minimum value: 0 Maximum value: 65535
    set-route-tag Route tag for routing table. integer Minimum value: 0 Maximum value: 4294967295
    Previous
    Next

    router route-map

    Configure route maps.

      config router route-map
      Description: Configure route maps.
      edit <name>
          set comments {string}
          config rule
              Description: Rule.
              edit <id>
                  set action [permit|deny]
                  set match-as-path {string}
                  set match-community {string}
                  set match-community-exact [enable|disable]
                  set match-origin [none|egp|...]
                  set match-interface {string}
                  set match-ip-address {string}
                  set match-ip6-address {string}
                  set match-ip-nexthop {string}
                  set match-ip6-nexthop {string}
                  set match-metric {integer}
                  set match-route-type [1|2|...]
                  set match-tag {integer}
                  set set-aggregator-as {integer}
                  set set-aggregator-ip {ipv4-address-any}
                  set set-aspath-action [prepend|replace]
                  set set-aspath <as1>, <as2>, ...
                  set set-atomic-aggregate [enable|disable]
                  set set-community-delete {string}
                  set set-community <community1>, <community2>, ...
                  set set-community-additive [enable|disable]
                  set set-dampening-reachability-half-life {integer}
                  set set-dampening-reuse {integer}
                  set set-dampening-suppress {integer}
                  set set-dampening-max-suppress {integer}
                  set set-dampening-unreachability-half-life {integer}
                  set set-extcommunity-rt <community1>, <community2>, ...
                  set set-extcommunity-soo <community1>, <community2>, ...
                  set set-ip-nexthop {ipv4-address}
                  set set-ip6-nexthop {ipv6-address}
                  set set-ip6-nexthop-local {ipv6-address}
                  set set-local-preference {integer}
                  set set-metric {integer}
                  set set-metric-type [1|2|...]
                  set set-originator-id {ipv4-address-any}
                  set set-origin [none|egp|...]
                  set set-tag {integer}
                  set set-weight {integer}
                  set set-flags {integer}
                  set match-flags {integer}
                  set set-route-tag {integer}
              next
          end
      next
  end

    config router route-map

    Parameter Name Description Type Size
    comments Optional comments. string Maximum length: 127

    config rule

    Parameter Name Description Type Size
    action Action.
    permit: Permit.
    deny: Deny.
    		 option -
    match-as-path Match BGP AS path list. string Maximum length: 35
    match-community Match BGP community list. string Maximum length: 35
    match-community-exact Enable/disable exact matching of communities.
    enable: Enable exact matching of communities.
    disable: Disable exact matching of communities.
    		 option -
    match-origin Match BGP origin code.
    none: None.
    egp: Remote EGP.
    igp: Local IGP.
    incomplete: Unknown heritage.
    		 option -
    match-interface Match interface configuration. string Maximum length: 15
    match-ip-address Match IP address permitted by access-list or prefix-list. string Maximum length: 35
    match-ip6-address Match IPv6 address permitted by access-list6 or prefix-list6. string Maximum length: 35
    match-ip-nexthop Match next hop IP address passed by access-list or prefix-list. string Maximum length: 35
    match-ip6-nexthop Match next hop IPv6 address passed by access-list6 or prefix-list6. string Maximum length: 35
    match-metric Match metric for redistribute routes. integer Minimum value: 0 Maximum value: 4294967295
    match-route-type Match route type.
    1: External type 1.
    2: External type 2.
    none: No type specified.
    		 option -
    match-tag Match tag. integer Minimum value: 0 Maximum value: 4294967295
    set-aggregator-as BGP aggregator AS. integer Minimum value: 0 Maximum value: 4294967295
    set-aggregator-ip BGP aggregator IP. ipv4-address-any Not Specified
    set-aspath-action Specify preferred action of set-aspath.
    prepend: Prepend.
    replace: Replace.
    		 option -
    set-aspath <as> Prepend BGP AS path attribute.
    AS number (0 - 42949672). NOTE: Use quotes for repeating numbers, e.g.: "1 1 2"
    string Maximum length: 79
    set-atomic-aggregate Enable/disable BGP atomic aggregate attribute.
    enable: Enable BGP atomic aggregate attribute.
    disable: Disable BGP atomic aggregate attribute.
    		 option -
    set-community-delete Delete communities matching community list. string Maximum length: 35
    set-community <community> BGP community attribute.
    Attribute: AA    		 AA:NN internet local-AS no-advertise no-export. string Maximum length: 79
    set-community-additive Enable/disable adding set-community to existing community.
    enable: Enable adding set-community to existing community.
    disable: Disable adding set-community to existing community.
    		 option -
    set-dampening-reachability-half-life Reachability half-life time for the penalty (1 - 45 min, 0 = unset). integer Minimum value: 0 Maximum value: 45
    set-dampening-reuse Value to start reusing a route (1 - 20000, 0 = unset). integer Minimum value: 0 Maximum value: 20000
    set-dampening-suppress Value to start suppressing a route (1 - 20000, 0 = unset). integer Minimum value: 0 Maximum value: 20000
    set-dampening-max-suppress Maximum duration to suppress a route (1 - 255 min, 0 = unset). integer Minimum value: 0 Maximum value: 255
    set-dampening-unreachability-half-life Unreachability Half-life time for the penalty (1 - 45 min, 0 = unset) integer Minimum value: 0 Maximum value: 45
    set-extcommunity-rt <community> Route Target extended community.
    AA:NN.    		 string Maximum length: 79
    set-extcommunity-soo <community> Site-of-Origin extended community.
    AA:NN    		 string Maximum length: 79
    set-ip-nexthop IP address of next hop. ipv4-address Not Specified
    set-ip6-nexthop IPv6 global address of next hop. ipv6-address Not Specified
    set-ip6-nexthop-local IPv6 local address of next hop. ipv6-address Not Specified
    set-local-preference BGP local preference path attribute. integer Minimum value: 0 Maximum value: 4294967295
    set-metric Metric value. integer Minimum value: 0 Maximum value: 4294967295
    set-metric-type Metric type.
    1: External type 1.
    2: External type 2.
    none: No type specified.
    		 option -
    set-originator-id BGP originator ID attribute. ipv4-address-any Not Specified
    set-origin BGP origin code.
    none: None.
    egp: Remote EGP.
    igp: Local IGP.
    incomplete: Unknown heritage.
    		 option -
    set-tag Tag value. integer Minimum value: 0 Maximum value: 4294967295
    set-weight BGP weight for routing table. integer Minimum value: 0 Maximum value: 4294967295
    set-flags BGP flags value (0 - 65535) integer Minimum value: 0 Maximum value: 65535
    match-flags BGP flag value to match (0 - 65535) integer Minimum value: 0 Maximum value: 65535
    set-route-tag Route tag for routing table. integer Minimum value: 0 Maximum value: 4294967295
    Previous
    Next