Configuring The Routing Table; Policy Routing - Fortinet FortiGate 100 Installation & Configuration Manual

Configuring the routing table

Configuring the routing table

Policy routing

118
The routing table shows the destination IP address and mask of each route you add
as well as the gateways and devices added to the route. The routing table also
displays the gateway connection status. A green check mark indicates that the
FortiGate unit has used the ping server and dead gateway detection to determine that
it can connect to the gateway; a red X means that a connection cannot be established.
A blue question mark means that the connection status is unknown. For more
information, see
The FortiGate unit assigns routes by searching for a match starting at the top of the
routing table and moving down until it finds the first match. You must arrange routes in
the routing table from more specific to more general. The default route is the most
general route. If you add a default route, it should be at the bottom of the routing table.
1 Go to System > Network > Routing Table.
2 Choose a route to move and select Move to
table.
3 Type a number in the Move to field to specify where in the routing table to move the
route and select OK.
4 Select Delete
Figure 3: Routing table
Policy routing extends the functions of destination routing. Using policy routing you
can route traffic based not only the destination address but also on:
• Source address
• Protocol, service type, or port range
• Incoming or source interface
Using policy routing you can build a routing policy database (RPDB) that selects the
appropriate route for traffic by executing a set of routing rules. To select a route for
traffic the FortiGate unit matches the traffic with the policy routes added to the RPDB
starting at the top of the list. The first policy route to match the traffic is used to set the
route for the traffic. The route supplies the next hop gateway as well as the FortiGate
interface to be used by the traffic.
Packets are matched with policy routes before they are matched with destination
routes. If a packet does not match a policy route it is routed using destination routes.
"Adding a ping server to an interface" on page
to remove a route from the routing table.
Network configuration
111, and
to change its order in the routing
Fortinet Inc.