Fortinet black logo

Administration Guide

Creating an IPv4 static route

Creating an IPv4 static route

To create an IPv4 static route:
  1. Go to Network > Static Routes.
  2. Select Create New to create a new IPv4 static route.

    The New Static Route window opens.

  3. Enter the following information:

    Destination

    The destination IP addresses and network masks of packets that the FortiPAM unit intercepts.

    Enter the IPv4 address and netmask of the new static route.

    Gateway Address

    The IP addresses of the next-hop routers to which intercepted packets are forwarded.

    Enter the gateway IP address for those packets that you intend to intercept.

    Note: Gateway Address is unavailable when the Interface is Blackhole.

    Interface

    The interface the static route is configured to.

    Select + and in Select Entries, select the interface or create a new interface.

    A blackhole route is a route that drops all traffic sent to it. Blackhole routes are used to dispose of packets instead of responding to suspicious inquiries. This provides added security since the originator will not discover any information from the target network. Blackhole routes can also limit traffic on a subnet. If some subnet addresses are not in use, traffic to those addresses, which may be valid or malicious, can be directed to a blackhole for added security and to reduce traffic on the subnet.

    Use the search bar to look for an interface.

    Use the pen icon next to an interface to edit the interface.

    Administrative Distance

    The number of hops the static route has to the configured gateway.

    The administrative distance is used to determine the cost of the route. Smaller distances are considered "better" route that should be used when multiple paths exist to the same destination (default = 10, 1 - 255).

    The route with same distance are considered as equal-cost multi-path (ECMP).

    Comments

    Optionally, enter a description about the static route.

    Status

    Enable/disable the static route.

    Advanced Options

    Priority

    A number for the priority of the static route. Routes with a larger number will have a lower priority. Routes with the same priority are considered as ECMP (default = 1 when creating an IPv4 static route, 1 - 65535).

    Priority can only be customized for statically configured routes. The priority of routes dynamically learned from the routing protocols is always 1.

    API Preview

    The API Preview allows you to view all REST API requests being used by the page. You can make changes on the page that are reflected in the API request preview.

    The feature is not available if the user is logged in as an administrator that has read-only GUI permissions.

  4. Click OK.
To use API preview:
  1. Click API Preview.

    The API Preview pane opens, and the values for the fields are visible (data). If a new object is being created, the POST request is shown.

  2. Enable Show modified changes only (enabled by default) to show the modified changes instead of the full configuration in the preview.
  3. Click Copy to Clipboard to copy the JSON code shown on the preview screen to the clipboard.
  4. Click Close to leave the preview.

Creating an IPv4 static route

To create an IPv4 static route:
  1. Go to Network > Static Routes.
  2. Select Create New to create a new IPv4 static route.

    The New Static Route window opens.

  3. Enter the following information:

    Destination

    The destination IP addresses and network masks of packets that the FortiPAM unit intercepts.

    Enter the IPv4 address and netmask of the new static route.

    Gateway Address

    The IP addresses of the next-hop routers to which intercepted packets are forwarded.

    Enter the gateway IP address for those packets that you intend to intercept.

    Note: Gateway Address is unavailable when the Interface is Blackhole.

    Interface

    The interface the static route is configured to.

    Select + and in Select Entries, select the interface or create a new interface.

    A blackhole route is a route that drops all traffic sent to it. Blackhole routes are used to dispose of packets instead of responding to suspicious inquiries. This provides added security since the originator will not discover any information from the target network. Blackhole routes can also limit traffic on a subnet. If some subnet addresses are not in use, traffic to those addresses, which may be valid or malicious, can be directed to a blackhole for added security and to reduce traffic on the subnet.

    Use the search bar to look for an interface.

    Use the pen icon next to an interface to edit the interface.

    Administrative Distance

    The number of hops the static route has to the configured gateway.

    The administrative distance is used to determine the cost of the route. Smaller distances are considered "better" route that should be used when multiple paths exist to the same destination (default = 10, 1 - 255).

    The route with same distance are considered as equal-cost multi-path (ECMP).

    Comments

    Optionally, enter a description about the static route.

    Status

    Enable/disable the static route.

    Advanced Options

    Priority

    A number for the priority of the static route. Routes with a larger number will have a lower priority. Routes with the same priority are considered as ECMP (default = 1 when creating an IPv4 static route, 1 - 65535).

    Priority can only be customized for statically configured routes. The priority of routes dynamically learned from the routing protocols is always 1.

    API Preview

    The API Preview allows you to view all REST API requests being used by the page. You can make changes on the page that are reflected in the API request preview.

    The feature is not available if the user is logged in as an administrator that has read-only GUI permissions.

  4. Click OK.
To use API preview:
  1. Click API Preview.

    The API Preview pane opens, and the values for the fields are visible (data). If a new object is being created, the POST request is shown.

  2. Enable Show modified changes only (enabled by default) to show the modified changes instead of the full configuration in the preview.
  3. Click Copy to Clipboard to copy the JSON code shown on the preview screen to the clipboard.
  4. Click Close to leave the preview.