System routing

Configuring routing settings

Use this procedure to configure routing settings for FortiIsolator.

Adding a static route

To add a static route:

1. From the administration portal, go to Network > System Routing.
2. To add a new static route, click Create New.
3. Type the destination IP address and subnet mask in the Destination IP/Mask field.
4. Type the gateway IP address in the Gateway field.
5. In the Device drop-down list, select the interface for the static route.
6. Click OK.

Editing a static route

To edit a static route:

1. From the administration portal, go to Network > System Routing.
2. To edit an existing static route, select the interface in the table, and click Edit.
3. Type the destination IP address and subnet mask in the Destination IP/Mask field.
4. Type the gateway IP address in the Gateway field.
5. In the Device drop-down list, select the interface for the static route.
6. Click OK.

Deleting a static route

To delete a static route:

1. From the administration portal, go to Network > System Routing.
2. To delete a static route, select the interface in the table, and click Delete.

Setting up system routing for management IP

To set up system routing for management IP from GUI:

1. Go to Portal > Network > System Routing.
2. Fill out Destination IP/Mask, Gateway, and select mgmt. from the Device dropdown.
3. Click OK to save it.

   

To set up system routing for management IP from CLI:

> set mgmt-gw/<subnet> <gateway>

e.g.

> set mgmt-gw 192.168.0.0/24 192.168.0.254

Setting up system routing for internal IP

To set up system routing for internal IP from GUI:

1. Go to Portal > Network > System Routing.
2. Fill out Destination IP/Mask, Gateway, and select Internal from the Device dropdown.
3. Click OK to save it.

   

To set up system routing for internal IP from CLI:

> set internal-gw/<subnet> <gateway>

e.g.

> set internal-gw 0.0.0.0/0 172.30.156.254

To setup system routing for external IP from GUI:

1. Go to Portal > Network > System Routing.
2. Fill out Destination IP/Mask, Gateway, and select External from the Device dropdown.
3. Click OK to save it.

   

To set up system routing for external IP from CLI:

> set external-gw/<subnet> <gateway>

e.g.

> set external-gw 172.30.157.0/24 172.30.157.254

To set up system routing for HA IP from GUI:

1. Go to Portal > Network > System Routing.
2. Fill out Destination IP/Mask, Gateway, and select HA from Device dropdown.
3. Click OK to save it.

   

To set up system routing for HA IP from CLI:

> set ha-gw/<subnet> <gateway>

e.g.

> set ha-gw 192.168.4.0/24 192.168.4.254

Configuring multiple routing on one interface

FortiIsolator supports multiple routes per interface.

Setting up multiple routes on one interface from CLI

Creating FortiIsolator profile from CLI needs to follow this format:

> set <gateway> <SUBNET> <Gateway IP>

internal-gw <SUBNET> <Gateway IP>

e.g. 192.168.100.0/24 192.168.100.1

external-gw <SUBNET> <Gateway IP>

e.g. 192.168.100.0/24 192.168.100.1

mgmt-gw <SUBNET> <Gateway IP>

e.g. 192.168.100.0/24 192.168.100.1

ha-gw <SUBNET> <Gateway IP>

e.g. 192.168.100.0/24 192.168.100.1

Example:

> set ha-ip 192.168.122.20/23

> set ha-gw 192.168.122.0/24 192.168.122.254

> set ha-gw 192.168.123.0/24 192.168.123.254

> show

**********Configured parameters**********

To set multiple routes on one interface from GUI:

1. Go to Network > System Routing.
2. Click Create New in the toolbar. The New Static Route page opens.
3. Provide Destination, IP/Mask, Gateway, and Device.
4. Click OK to save the input and return to System Routing page.