FORTIGATE STATIC ROUTE AND POLICY ROUTE

Summary

In this video tutorial, the focus is on configuring static routing and policy-based routing between two sites, simulating a network setup for departments within a company. The process includes setting up connections, defining static routes, and configuring firewall policies to manage traffic flow through different links. The tutorial also covers testing connectivity, implementing routing policies, and troubleshooting with ping tests. Viewers will learn to efficiently manage network routes and traffic policies in a dynamic enterprise environment using both command-line and graphical interfaces.

Takeaways

• 😀 The video tutorial focuses on configuring static routing and policy-based routing between two sites in a network setup.
• 😀 The static routing configuration is demonstrated with a direct link between two devices, simulating two departments in a company.
• 😀 The process begins with setting up a connection between the two sites using the 7th port and configuring an IP range (172.21.1.0/30) for connectivity.
• 😀 The video includes a step-by-step explanation of configuring static routes, including setting the destination IP and next-hop for routing.
• 😀 Policy-based routing (PBR) is introduced to manage traffic differently based on its type, directing specific traffic through particular interfaces.
• 😀 The video explains how to create and test policies to route traffic (e.g., ICMP and HTTP) over different paths, ensuring more granular control over network traffic.
• 😀 A firewall policy is configured to handle both inbound and outbound traffic, with special attention to the direction of traffic flow and the correct interface setup.
• 😀 A new route is added for the network 10.0.1.0/24, specifying the next hop as the IP of the site 1 interface (172.21.1.1).
• 😀 The tutorial also demonstrates creating reverse policies for firewall rules, ensuring bi-directional connectivity between the two sites.
• 😀 The video concludes with a ping test and validation using a web service hosted on the domain controller to verify that both static routes and policies are functioning correctly.

Q & A

What is the main focus of the lab session described in the transcript?

The main focus is on configuring static routing and policy-based routing between two sites, along with setting up firewall policies for traffic management.

How are the sites represented in the lab setup?

The sites are represented as different departments within a company, for example, one site could be the Human Resources department and the other could be another department.

What is the role of the link configuration between Site A and Site B?

The link configuration between Site A and Site B is used to establish a network connection between the two sites. The link is set up on port 7 with an IP address range of 172.21.1.0/30.

What does the static route configuration involve?

The static route configuration involves adding a new route to the network, with the destination address 10.0.2.0/24 and specifying the next hop IP address, which is 172.21.1.1.

Why are two firewall policies needed for the routing setup?

Two firewall policies are required: one for outbound traffic and one for inbound traffic. Both policies are necessary for ensuring complete connectivity between the sites.

How are the firewall policies configured?

The firewall policies are configured by specifying source and destination interfaces, defining traffic flow, and setting them to always active. One policy is created for outbound traffic and another for inbound traffic.

What is the purpose of Policy-based Routing (PBR) in this setup?

Policy-based Routing (PBR) is used to direct specific types of traffic, like ICMP (ping) or HTTP traffic, to different paths based on predefined policies, enhancing traffic control.

What role does the router play in the lab session?

The router serves as a device that helps in routing traffic between different networks and implements static routes and policy-based routing based on the defined network structure.

What issue was encountered with the HTTP traffic during the test?

The HTTP traffic did not route correctly due to missing configuration in the Internet routing setup. The ping (ICMP) worked as expected, but the HTTP traffic was not forwarded correctly to the intended path.

How does the policy-based routing affect the traffic flow in the lab?

Policy-based routing affects traffic flow by ensuring that ICMP traffic goes through one interface (ISP1) while HTTP traffic is routed through another interface. This segmentation helps in managing traffic according to the policies defined.