Fortinet black logo

Hyperscale firewall VDOM asymmetric routing with ECMP support

Copy Link
Copy Doc ID 2d41ab62-4d5b-11ec-bdf2-fa163e15d75b:810779
Download PDF

Hyperscale firewall VDOM asymmetric routing with ECMP support

Hyperscale firewall VDOMs for FortiOS 6.4.8 have improved support for asymmetric routing and ECMP. In most cases asymmetric routing will work the same way in a hyperscale firewall VDOM as in a normal VDOM, with the following notes and exceptions:

  • The auxiliary-session and asymroute-icmp options of the config system settings command do not have to be enabled for the hyperscale firewall VDOM for asymmetric routing to work.

  • Make sure that original routes (O-routes) do not overlap with reverse routes (R-routes). If you have created overlapping O- and R-routes, all reply traffic uses the same O-route.

  • If possible, create an even number of ECMP paths. Traffic distribution is uneven if you have an odd number of ECMP paths. For example, if your configuration includes one O-route and three R-routes, the reply traffic distribution will be approximately 2:1:1 among the three R-routes.

Hyperscale firewall VDOM asymmetric routing with ECMP support

Hyperscale firewall VDOMs for FortiOS 6.4.8 have improved support for asymmetric routing and ECMP. In most cases asymmetric routing will work the same way in a hyperscale firewall VDOM as in a normal VDOM, with the following notes and exceptions:

  • The auxiliary-session and asymroute-icmp options of the config system settings command do not have to be enabled for the hyperscale firewall VDOM for asymmetric routing to work.

  • Make sure that original routes (O-routes) do not overlap with reverse routes (R-routes). If you have created overlapping O- and R-routes, all reply traffic uses the same O-route.

  • If possible, create an even number of ECMP paths. Traffic distribution is uneven if you have an odd number of ECMP paths. For example, if your configuration includes one O-route and three R-routes, the reply traffic distribution will be approximately 2:1:1 among the three R-routes.