FortiNAC
NOTE: FortiNAC is now named FortiNAC-F. For post-9.4 articles, see FortiNAC-F. FortiNAC is a zero-trust network access solution that provides users with enhanced visibility into the Internet of Things (IoT) devices on their enterprise networks.
FortiKoala
Staff
Staff
Article Id 196419
Description
Mass Import Static Routes to Network Sentry

Scope
Version: All
Solution
Version: All

Issue:  Needing to add a large number of static routes to Network Sentry for eth1 traffic (to prevent asymmetric routing).  Configuration Wizard only allows adding one route at a time via the UI.

Solution:  Add the list of static routes via the CLI, then import to Configuration Wizard.
 
1. Edit /etc/sysconfig/static-routes in Network Sentry Server or Application Server via CLI.
2. Add static route entries.  A list can be made and pasted into the file.
Example (IP address after "gw" identifies the gateway for eth1):
any net 192.168.130.0/24 gw 172.16.99.1
any net 172.168.130.0/24 gw 172.16.99.1
any net 192.168.131.0/24 gw 172.16.99.1


3. Save the file.
4. Cat file to confirm entries:
cat /etc/sysconfig/static-routes

5. Restart the interface to apply changes.
service network restart

6.  Access Configuration Wizard.  Point web browser to the IP Address of the Network Sentry Server or Network Sentry Control Server:
http://<IP Address>:8080/configWizard
http://<Host Name of the appliance>:8080/configWizard


7.  Enter the User Name and Password credentials that you configured when assigning an IP address to gain access to the Configuration Wizard.

8.  Navigate to the Layer 3 Network - Additional Routes window and click the Read File button.  The number of routes in the system routes file is listed next to the button.

Important: The routes entered into the list on this view are written to the system routes file when Apply is clicked in the Summary view.  If the list is blank, ALL routes in the system routes file with the exception of the Default Gateway are removed from the system routes file.

Contributors