Static routing

Static routing is one of the foundations of firewall configuration. It is a form of routing in which a device uses manually-configured routes. In the most basic setup, a firewall will have a default route to its gateway to provide network access. In a more complex setup with dynamic routing, ADVPN, or SD-WAN involved, you would still likely find static routes being deployed.

This section explores concepts in using static routing and provides examples in common use cases:

• Routing concepts

• Policy routes

• Equal cost multi-path

• Dual internet connections

The following topics include additional information about static routes:

• Deploying the Security Fabric

• Security Fabric over IPsec VPN

• Adding a static route

• NAT mode

• NAT and transparent mode

• IPsec VPN in an HA environment

• IPsec VPN to Azure with virtual network gateway

• FortiGate as dialup client

• ADVPN with BGP as the routing protocol

• ADVPN with OSPF as the routing protocol

• ADVPN with RIP as the routing protocol

• Basic site-to-site VPN with pre-shared key

• Site-to-site VPN with digital certificate

• Site-to-site VPN with overlapping subnets

• Tunneled Internet browsing

• Multiple concurrent SDN connectors

• Packet distribution and redundancy for aggregate IPsec tunnels

• Using BGP tags with SD-WAN rules