FortiGate Administration Guide - FirewallShop.com

Policy Route
Router Static
Adding a route policy
Source The IP source addresses and network masks that cause policy routing to
occur.
Destination The IP destination addresses and network masks that cause policy routing to
occur.
Delete icon Select to delete a policy route.
Edit icon Select to edit a policy route.
Move To
icon
Select to move policy route up or down in the policy route table. Selecting
this icon will bring up the Move Policy Route screen where you can specify
the new location in the Policy Route table. See “Moving a route policy”.
Route policy options define which attributes of a incoming packet cause policy
routing to occur. If the attributes of a packet match all the specified conditions, the
FortiGate unit routes the packet through the specified interface to the specified
gateway.
To add a route policy, go to Router > Static > Policy Route and select Create
New.
Figure 150 shows the New Routing Policy dialog box belonging to a FortiGate unit
that has interfaces named “external” and “internal”. The names of the interfaces
on your FortiGate unit may be different.
Figure 150:New Routing Policy
Protocol
To perform policy routing based on the value in the protocol field of
the packet, type the protocol number to match. The range is from 0
to 255. A value of 0 disables the feature.
Incoming Interface Select the name of the interface through which incoming packets
subjected to the policy are received.
Source Address /
Mask
Destination
Address / Mask
Destination Ports
To perform policy routing based on the IP source address of the
packet, type the source address and network mask to match. A value
of 0.0.0.0/0.0.0.0 disables the feature.
To perform policy routing based on the IP destination address of the
packet, type the destination address and network mask to match. A
value of 0.0.0.0/0.0.0.0 disables the feature.
To perform policy routing based on the port on which the packet is
received, type the same port number in the From and To fields. If you
want policy routing to apply to a range of ports, type the starting port
number in the From field and the ending port number in the To field.
Zero values disable this feature.
FortiGate Version 3.0 MR5 Administration Guide
240 01-30005-0203-20070830