Static & Dynamic Routing monitor

The Static & Dynamic Routing Monitor displays the routing table on the FortiGate, including all static and dynamic routing protocols in IPv4 and IPv6. You can also use this monitor to view policy routes, BGP neighbors and paths, and OSPF neighbors.

To view the routing monitor in the GUI:

1. Go to Dashboard > Network.
2. Hover over the Routing widget, and click Expand to Full Screen. The Routing monitor is displayed.
3. To view neighbors and paths, click the monitors dropdown at the top of the page.

   BGP Neighbors

   

   BGP Paths

   

   IPv6 BGP Paths

   

   OSPF Neighbors

   

4. To filter the Interfaces and Type columns:
   1. Click the Static & Dynamic tab.
   2. Hover over the column heading, and click the Filter/Configure Column icon.

      

   3. Click Group By This Column, then click Apply.
5. (Optional) Click Save as Monitor to save the widget as monitor.

To look up a route in the GUI:

1. Click Route Lookup.
2. Enter an IP address in the Destination field, then click Search. The matching route is highlighted on the Routing monitor.

To view the routing table in the CLI:

# get route info routing-table all

Sample output:

Codes: K - kernel, C - connected, S - static, R - RIP, B - BGP

O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default

Routing table for VRF=0

S* 0.0.0.0/0 [1/0] via 10.0.10.1, To-HQ-A

[1/0] via 10.0.12.1, To-HQ-MPLS

[1/0] via 10.10.11.1, To-HQ-B

[1/0] via 10.100.67.1, port1

[1/0] via 10.100.67.9, port2

C 10.0.10.0/24 is directly connected, To-HQ-A

C 10.0.10.2/32 is directly connected, To-HQ-A

C 10.0.11.0/24 is directly connected, To-HQ-B

C 10.0.11.2/32 is directly connected, To-HQ-B

C 10.0.12.0/24 is directly connected, To-HQ-MPLS

C 10.0.12.2/32 is directly connected, To-HQ-MPLS

C 10.1.0.0/24 is directly connected, port3

C 10.1.0.2/32 is directly connected, port3

C 10.1.0.3/32 is directly connected, port3

C 10.1.100.0/24 is directly connected, vsw.port6

To look up a firewall route in the CLI:

# diagnose firewall proute list

Sample output:

list route policy info(vf=root):

id=0x7f450002 vwl_service=2(BusinessCritialCloudApp) vwl_mbr_seq=4 5 3 dscp_tag=0xff 0xff flags=0x0 tos=0x00 tos_mask=0x00 protocol=0 sport=0:65535 iif=0 dport=1-65535 oif=3(port1) oif=4(port2) oif=18(To-HQ-MPLS)

source(1): 0.0.0.0-255.255.255.255

destination wildcard(1): 0.0.0.0/0.0.0.0

internet service(4): Microsoft.Office.365(4294837472,0,0,0, 33182) Microsoft.Office.Online(4294837475,0,0,0, 16177) Salesforce(4294837976,0,0,0, 16920) GoToMeeting(4294836966,0,0,0, 16354)

hit_count=0 last_used=2020-03-30 10:50:18

id=0x7f450003 vwl_service=3(NonBusinessCriticalCloudApp) vwl_mbr_seq=4 5 dscp_tag=0xff 0xff flags=0x0 tos=0x00 tos_mask=0x00 protocol=0 sport=0:65535 iif=0 dport=1-65535 oif=3(port1) oif=4(port2)

source(1): 0.0.0.0-255.255.255.255

destination wildcard(1): 0.0.0.0/0.0.0.0

internet service(2): Facebook(4294836806,0,0,0, 15832) Twitter(4294838278,0,0,0, 16001)

hit_count=0 last_used=2020-03-30 10:50:18

id=0x7f450004 vwl_service=4(Ping-Policy) vwl_mbr_seq=1 2 dscp_tag=0xff 0xff flags=0x0 tos=0x00 tos_mask=0x00 protocol=1 sport=0:65535 iif=0 dport=1-65535 oif=16(To-HQ-A) oif=17(To-HQ-B)

To view neighbors and paths