System routing
Configuring routing settings
Use this procedure to configure routing settings for FortiIsolator.
Adding a static route
Use this procedure to add a static route.
Steps
- From the administration portal, go to Network > System Routing.
- To add a new static route, click Create New.
- Type the destination IP address and subnet mask in the Destination IP/Mask field.
- Type the gateway IP address in the Gateway field.
- In the Device drop-down list, select the interface for the static route.
- Click OK.
Editing a static route
Use this procedure to edit a static route.
Steps
- From the administration portal, go to Network > System Routing.
- To edit an existing static route, select the interface in the table, and click Edit.
- Type the destination IP address and subnet mask in the Destination IP/Mask field.
- Type the gateway IP address in the Gateway field.
- In the Device drop-down list, select the interface for the static route.
- Click OK.
Deleting a static route
Use this procedure to delete a static route.
Steps
- From the administration portal, go to Network > System Routing.
- To delete a static route, select the interface in the table, and click Delete.
Setting up system routing for Management IP
To set up system routing for Management IP from GUI:
- Go to Portal > Network > System Routing
- Fill out Destination IP/Mask, Gateway, and select mgmt. from Device dropdown.
-
Click OK to save it.
To set up system routing for Management IP from CLI:
> set mgmt-gw/<subnet> <gateway>
e.g.
> set mgmt-gw 0.0.0.0/0 192.168.1.254
Setting up system routing for Internal IP
To set up system routing for Internal IP from GUI:
- Go to Portal > Network > System Routing
- Fill out Destination IP/Mask, Gateway, and select Internal from Device dropdown.
-
Click OK to save it.
To set up system routing for Internal IP from CLI:
> set internal-gw/<subnet> <gateway>
e.g.
> set internal-gw 0.0.0.0/0 192.168.2.254
To setup system routing for External IP from GUI:
- Go to Portal > Network > System Routing
- Fill out Destination IP/Mask, Gateway, and select External from Device dropdown.
-
Click OK to save it.
To set up system routing for External IP from CLI:
> set external-gw/<subnet> <gateway>
e.g.
> set external-gw 0.0.0.0/0 192.168.3.254
To set up system routing for HA IP from GUI:
- Go to Portal > Network > System Routing
- Fill out Destination IP/Mask, Gateway, and select HA from Device dropdown.
-
Click OK to save it.
To set up system routing for HA IP from CLI:
> set ha-gw/<subnet> <gateway>
e.g.
> set ha-gw 0.0.0.0/0 192.168.4.254
Configuring multiple routing on one interface
FortiIsolator supports multiple routes per interface.
Setting up multiple routes on one interface from CLI
Creating FortiIsolator profile from CLI needs to follow this format:
> set <gateway> <SUBNET> <Gateway IP>
internal-gw <SUBNET> <Gateway IP>
e.g. 192.168.100.0/24 192.168.100.1
external-gw <SUBNET> <Gateway IP>
e.g. 192.168.100.0/24 192.168.100.1
mgmt-gw <SUBNET> <Gateway IP>
e.g. 192.168.100.0/24 192.168.100.1
ha-gw <SUBNET> <Gateway IP>
e.g. 192.168.100.0/24 192.168.100.1
Example:
> set ha-ip 192.168.122.20/23
> set ha-gw 192.168.122.0/24 192.168.122.254
> set ha-gw 192.168.123.0/24 192.168.123.254
> show
**********Configured parameters**********
Setting multiple routes on one interface from GUI
- Go to Network > System Routing.
- Click on Create New in the toolbar. The New Static Route page opens.
- Provide Destination, IP/Mask, Gateway, and Device.
- Click OK to save the input and return to System Routing page.