[FortiGate] How to configure a static route

Firewall (UTM)

Work environment

  • FortiGate 60E
    • version 7.0.1

Configure a static route in GUI

Open the [Network > Static Routes] screen and click [Create New].

The New Static Route screen is displayed.

For Destination, select Subnet and enter the destination network address and subnet mask.
The subnet mask part can be expressed in prefix length. (For example

Then enter the Gateway Address. Gateway Address is the next hop address.
When you enter the Gateway Address, the output interface is automatically detected and displayed in the Interface column.

Click OK when you are done.

Confirm that the static route has been added to the static routes screen.

The configuration is complete.

Configure a static route in CLI

The configuration of static routes in the CLI is config router static.

When configured according to the static route configuration example in the GUI described above, the CLI configuration will be as follows.

FTG60E # show full-configuration router static
config router static
    edit 1
        set status enable
        set dst
        set gateway
        set distance 10
        set weight 0
        set priority 0
        set device "wan1"
        set comment ''
        set blackhole disable
        set dynamic-gateway disable
        set link-monitor-exempt disable
        set bfd disable

The part from edit 1 to next corresponds to one static route.

In general, the items that need to be explicitly configured are:

  • edit number: Numbering from unused number.
  • set dst: Destination
  • set gateway: Gateway Address
  • set device: Interface

Change other items from the default values as needed.

Check the routing table

Run the get router info routing-table all command to display the routing table.

FTG60E # get router info routing-table all
Codes: K - kernel, C - connected, S - static, R - RIP, B - BGP
       O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
       * - candidate default

Routing table for VRF=0
S* [5/0] via, wan1
C is directly connected, dmz
S [10/0] via, wan1
C is directly connected, wan1

You can also see the routing table on the [Dashboard> Network> Static & Dynamic Routing Card] screen of the GUI.


Ads Blocker Image Powered by Code Help Pro

Ads Blocker Detected!!!

We have detected that you are using extensions to block ads. Please support us by disabling these ads blocker.