FortiGate Administration Guide - FirewallShop.com

Router Static
Static Route
• Device: Name of the interface connected to network 192.168.10.0/24
(for example, external).
• Distance: 10
The Gateway setting specifies the IP address of the next hop router interface to
the FortiGate external interface. The interface behind the router (192.168.10.1) is
the default gateway for FortiGate_1.
In some cases, there may be routers behind the FortiGate unit. If the destination
IP address of a packet is not on the local network but is on a network behind one
of those routers, the FortiGate routing table must include a static route to that
network. For example, in Figure 147, the FortiGate unit must be configured with
static routes to interfaces 192.168.10.1 and 192.168.11.1 in order to forward
packets to Network_1 and Network_2 respectively.
Figure 147:Destinations on networks behind internal routers
Internet
FortiGate_1
internal
dmz
Router_1 192.168.10.1
192.168.11.1
Router_2
Network_1
192.168.20.0/24
Network_2
192.168.30.0/24
To route packets from Network_1 to Network_2, Router_1 must be configured to
use the FortiGate internal interface as its default gateway. On the FortiGate unit,
you would create a new static route with these settings:
Destination IP/mask: 192.168.30.0/24
Gateway: 192.168.11.1
Device: dmz
Distance: 10
To route packets from Network_2 to Network_1, Router_2 must be configured to
use the FortiGate dmz interface as its default gateway. On the FortiGate unit, you
would create a new static route with these settings:
Destination IP/mask: 192.168.20.0/24
Gateway: 192.168.10.1
Device: internal
Distance: 10
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 237