The FortiADC system evaluates traffic to determine the routing rules to apply. With regard to link load balancing, the system evaluates rules in the following order and applies the first match: 1. LLB link policy 2. Policy route 3. Static/Dynamic route 4. LLB default link group |
Option | Guidelines |
Default Link Group | Select a link group configuration object that is used as the default when traffic does not match policy rules. |
Name | Unique name. No spaces or special characters. After you initially save the configuration, you cannot edit the name. |
Ingress Interface | Select the network interface to which the policy applies. |
Source | Select an address object to match source addresses. If you do not specify a source address, the rule matches any source address. See “Creating IP address objects”. |
Destination | Select an address object to match destination addresses. If you do not specify a destination address, the rule matches any destination. See “Creating IP address objects”. |
Service | Select a service object to match destination services. If you do not specify a service, the rule matches any service. See “Creating service objects”. |
Schedule | Select the schedule object that determines the times the system uses the logic of this configuration. The link policy is active when the current time falls in a time period specified by one or more schedules in the schedule group. If you do not specify a schedule, the rule applies at all times. See “Creating schedule groups”. |
Group Type | • Link Group—Policy applies to a link group. Select the option, then the link group. See “Configuring a link group”. • Virtual Tunnel—Policy applies to a virtual tunnel. Select the option, then the virtual tunnel. See “Configuring a virtual tunnel group”. |
Reordering | |
After you have saved a rule, reorder rules as necessary. The rules table is consulted from top to bottom. The first rule that matches is applied and subsequent rules are not evaluated. |