Fortinet white logo
Fortinet white logo

Administration Guide

Configure a VRF ID on an interface

Configure a VRF ID on an interface

From the Network > Interfaces page, users can configure VRF (virtual routing and forwarding) IDs directly on the interface. The VRF IDs can be displayed in the routing monitor and can be used to create blackhole static routes.

VRF allows multiple routing table instances to co-exist on the same router. One or more interfaces may have a VRF, and packets are only forwarded between interfaces with the same VRF.

Note

Enable Advanced Routing in System > Feature Visibility to use this feature.

To configure a VRF ID in the GUI:
  1. Configure the interface:
    1. Go to Network > Interfaces and click Create New > Interface.
    2. Enter a value in the VRF ID field.
    3. Configure the other settings as needed.
    4. Click OK.

    5. To add the VRF column in the interface table, click the gear icon, select VRF, and click Apply.

  2. Add a blackhole static route using the VRF ID:
    1. Go to Network > Static Routes and click Create New.
    2. Enter the subnet.
    3. In the Interface field, select Blackhole.
    4. In the VRF ID field, enter the ID you created in step 1.
    5. Click OK.

To configure a VRF ID in the CLI:
  1. Configure the interface:
    config system interface
        edit test_interface
            ...
            set vrf 14
        next
    end
  2. Add a blackhole static route using the VRF ID:
    config router static
        edit 3
            set dst 8.8.8.8 255.255.255.255
            set blackhole enable
            set vrf 14
        next
    end

Configure a VRF ID on an interface

Configure a VRF ID on an interface

From the Network > Interfaces page, users can configure VRF (virtual routing and forwarding) IDs directly on the interface. The VRF IDs can be displayed in the routing monitor and can be used to create blackhole static routes.

VRF allows multiple routing table instances to co-exist on the same router. One or more interfaces may have a VRF, and packets are only forwarded between interfaces with the same VRF.

Note

Enable Advanced Routing in System > Feature Visibility to use this feature.

To configure a VRF ID in the GUI:
  1. Configure the interface:
    1. Go to Network > Interfaces and click Create New > Interface.
    2. Enter a value in the VRF ID field.
    3. Configure the other settings as needed.
    4. Click OK.

    5. To add the VRF column in the interface table, click the gear icon, select VRF, and click Apply.

  2. Add a blackhole static route using the VRF ID:
    1. Go to Network > Static Routes and click Create New.
    2. Enter the subnet.
    3. In the Interface field, select Blackhole.
    4. In the VRF ID field, enter the ID you created in step 1.
    5. Click OK.

To configure a VRF ID in the CLI:
  1. Configure the interface:
    config system interface
        edit test_interface
            ...
            set vrf 14
        next
    end
  2. Add a blackhole static route using the VRF ID:
    config router static
        edit 3
            set dst 8.8.8.8 255.255.255.255
            set blackhole enable
            set vrf 14
        next
    end