Technical Tip: Configure static routes and black h...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 230872

Description

This article explains how to configure a static route and a black hole route to different VRFs.

Scope

All versions of FortiOS.

Solution

To configure a static route to a different VRF, first configure the VRF ID on the relevant interface:

# config system interface

edit <interface>
set vrf <id>
next

end

Next, configure the static route pointing to the interface:

# config router static

edit <>
set gateway x.x.x.x
set device "interface"

end

To configure a black hole route to a different VRF, enable the option set blackhole enable and configure the VRF ID:

# config router static

edit <>
set blackhole enable
set vrf <id>
next

end

To verify the different VRFs, run the following commands:

# get router info routing-table all
# get router info routing-table database

1893

Contributors

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: Configure static routes and black hole routes to different VRFs