Fortinet black logo

Administration Guide

Configuring routing

Configuring routing

If one or more routers is between FortiRecorder and the Internet, your cameras, etc., then you must specify which is the default route ("gateway" router) that network traffic from FortiRecorder uses to reach other parts of your network.

Note

If you used DHCP and Retrieve default gateway and DNS from server when configuring your network interfaces, skip this step — the default route was configured automatically.

Note

For small networks with only a few devices, often you will only need to configure one route: a default route that forwards packets to your router that is the gateway to the Internet.

If you have redundant gateway routers (for example, dual Internet/WAN links), or a larger network with multiple routers (each of which should receive packets destined for a different subset of IP addresses), then you might need to configure multiple static routes.

  1. Log in to the admin administrator account.

    Other accounts might not have the permissions required to change this setting.

  2. Go to System > Network > Routing.
  3. Click New.
  4. Configure the following settings:

    Setting Name

    Description

    Destination IP/netmask

    Type the destination IP address and network mask of packets that will be subject to this static route, separated by a slash ( / ).

    The value 0.0.0.0/0 results in a default route, which matches all packets.

    Interface

    Select the port number from the dropdown list.

    Gateway

    Type the IP address of the next-hop router where the FortiRecorder appliance will forward packets subject to this static route. This router must know how to route packets to the destination IP addresses that you have specified in Destination IP/netmask, or forward packets to another router with this information.

    For a direct Internet connection, this will be the router that forwards traffic towards the Internet, and could belong to your ISP.

    Note

    The gateway IP address must be in the same subnet as a network interface's IP address. Failure to do so will cause FortiRecorder to delete all static routes, including the default gateway.

  5. Click OK.

  6. If you are moving FortiRecorder to connect through a different router in your network, then re-connect it at the intended location now. (Connections through the previous gateway will fail until you do this.)

    The FortiRecorder appliance should now be reachable to networks indicated by the mask.

  7. To verify connectivity, from a computer on the route's network destination, attempt to ping one of the network interfaces of FortiRecorder that should be reachable from that location. If the connectivity test fails, you can use the CLI commands to determine if a complete route exists from the FortiRecorder to the host:

    execute ping <destination_ipv4>

    and to determine the point of connectivity failure:

    execute traceroute <destination_ipv4>

    See also Examining routing.

Configuring routing

If one or more routers is between FortiRecorder and the Internet, your cameras, etc., then you must specify which is the default route ("gateway" router) that network traffic from FortiRecorder uses to reach other parts of your network.

Note

If you used DHCP and Retrieve default gateway and DNS from server when configuring your network interfaces, skip this step — the default route was configured automatically.

Note

For small networks with only a few devices, often you will only need to configure one route: a default route that forwards packets to your router that is the gateway to the Internet.

If you have redundant gateway routers (for example, dual Internet/WAN links), or a larger network with multiple routers (each of which should receive packets destined for a different subset of IP addresses), then you might need to configure multiple static routes.

  1. Log in to the admin administrator account.

    Other accounts might not have the permissions required to change this setting.

  2. Go to System > Network > Routing.
  3. Click New.
  4. Configure the following settings:

    Setting Name

    Description

    Destination IP/netmask

    Type the destination IP address and network mask of packets that will be subject to this static route, separated by a slash ( / ).

    The value 0.0.0.0/0 results in a default route, which matches all packets.

    Interface

    Select the port number from the dropdown list.

    Gateway

    Type the IP address of the next-hop router where the FortiRecorder appliance will forward packets subject to this static route. This router must know how to route packets to the destination IP addresses that you have specified in Destination IP/netmask, or forward packets to another router with this information.

    For a direct Internet connection, this will be the router that forwards traffic towards the Internet, and could belong to your ISP.

    Note

    The gateway IP address must be in the same subnet as a network interface's IP address. Failure to do so will cause FortiRecorder to delete all static routes, including the default gateway.

  5. Click OK.

  6. If you are moving FortiRecorder to connect through a different router in your network, then re-connect it at the intended location now. (Connections through the previous gateway will fail until you do this.)

    The FortiRecorder appliance should now be reachable to networks indicated by the mask.

  7. To verify connectivity, from a computer on the route's network destination, attempt to ping one of the network interfaces of FortiRecorder that should be reachable from that location. If the connectivity test fails, you can use the CLI commands to determine if a complete route exists from the FortiRecorder to the host:

    execute ping <destination_ipv4>

    and to determine the point of connectivity failure:

    execute traceroute <destination_ipv4>

    See also Examining routing.