FortiGate Essentials for SMEs in Palestine
Static Routing
Static routing is a basic method used in network devices, including FortiGate firewalls. FortiGate typically has a default route for internet access, and in complex setups, static
routes are used. These routes are stored in a routing table to guide incoming traffic.
Short guide on setting up a static routing policy in FortiGate
The default route is like telling FortiGate, "If you're not sure where to send the traffic, send it here." It allows all devices connected to FortiGate to access the internet, using a general address (0.0.0.0) for any web destination. This route directs traffic to another router, often through the WAN port, ensuring internal traffic can reach the internet. Proper routing is crucial for this.
​
Static routing features:
-
Best path for traffic
-
Using Routing tables
-
Static Routing Ideal for small networks, static routing provides a simple and manual method of routing traffic where routes are fixed.
-
Support dynamic routing protocols: Dynamic Routing Protocols Essential for larger networks, dynamic routing automatically adjusts routes based on network conditions, improving efficiency and reliability.
-
OSPF (Open Shortest Path First)
-
RIP (Routing Information Protocol)
-
BGP (Border Gateway Protocol)
-
FQDN (Fully Qualified Domain Name)
-
IS-IS (Intermediate System to Intermediate System)
-
​
How to Set Up a Static Routing Policy
Setting up a static routing policy on your FortiGate device helps optimize network performance and enhance control over data routing. Follow these steps to configure a static route:
​
-
Access the FortiGate Interface:
-
Log in to your FortiGate device's web-based interface using your browser.
-
-
Navigate to the Static Routes Section:
-
Go to Network > Static Routes.
-
-
Create a New Static Route:
-
Click on Create New to add a new static route.
-
-
Configure the Static Route:
-
Destination IP/Mask: Enter the destination IP address and subnet mask (e.g., 192.168.1.0/24).
-
Device/Interface: Select the outgoing interface (e.g., WAN1, LAN).
-
Gateway: Enter the gateway IP address that will route the traffic (e.g., 192.168.1.1).
-
Distance: Set the administrative distance (default is usually fine).
-
-
Save the Configuration:
-
Click OK to save the static route.
-
-
Verify the Route:
-
Go to Network > Routing Monitor to ensure the new static route is active and correctly configured.
-
Example Configuration:
-
Destination IP/Mask: 192.168.2.0/24
-
Device/Interface: WAN1
-
Gateway: 192.168.1.1
-
Distance: 10
By setting a static route in the firewall to reach the NAT object, you can optimize network performance and enhance control over data routing.
