Persistent Routing Optional Services
l In LAN, established connections from IP address 192.168.0.100 to 192.168.10.100 are NOT to be routed
persistently.
l Established connections from DMZ to LAN are NOT to be routed persistently.
l Established connections from LAN to the host IP ranging from 10.10.1.1 ~ 10.10.1.10 are NOT to be routed
persistently.
l Since the default action by IP Pair rules is Do PR, if no rule is added, all connections will use persistent routing.
Then persistent routing table will look like:
Source Destination Action
192.168.0.100 192.192.10.100 No PR
DMZ WAN No PR
LAN 10.10.1.1-10.10.1.10 No PR
Example 2
The persistent routing policies to be established accordingly:
HTTP and HTTPs connections from the subnet 192.168.0.0/24 in LAN use persistent routing.
HTTP and HTTPs connections from WAN use persistent routing.
As there is no default action set by Web Service Rules, if no rule is added, all connections will be based on IP Pair
Rules to determine whether to use persistent routing.
The persistent routing table should look like:
Source Action
192.168.0.0/255.255.255.0 Do PR
WAN Do PR
Example 3
The persistent routing policies to be established accordingly:
HTTP and HTTPs connections from LAN hosts with IP range 192.168.0.10~192.168.0.20 use persistent routing, but
this does not apply to other services except IP address 192.168.0.15.
HTTP and HTTPs connections from subnet 192.168.10.0/24 to 192.192.10.100 use persistent routing. But this does
not apply to other connections.
Connections from IP address 211.21.48.196 in DMZ to the WAN subnet 10.10.1.0/24 in WAN do NOT use persistent
routing.
Since the default action by IP Pair Ruels is Do PR, if no rule is added, all connections will use persistent routing.
Then persistent routing table will look like:
FortiWAN Handbook
Fortinet Technologies Inc.
225
To Next Page
Loading...
