Hyperscale firewall VDOM asymmetric routing with ECMP support

Hyperscale firewall VDOMs for FortiOS 6.2.9 have improved support for asymmetric routing and ECMP. In most cases asymmetric routing will work the same way in a hyperscale firewall VDOM as in a normal VDOM, with the following notes and exceptions:

• The auxiliary-session and asymroute-icmp options of the config system settings command do not have to be enabled for the hyperscale firewall VDOM for asymmetric routing to work.

• Make sure that original routes (O-routes) do not overlap with reverse routes (R-routes). If you have created overlapping O- and R-routes, all reply traffic uses the same O-route.

• If possible, create an even number of ECMP paths. Traffic distribution is uneven if you have an odd number of ECMP paths. For example, if your configuration includes one O-route and three R-routes the reply traffic distribution will be approximately 2:1:1 among the three R-routes.