The firewall requires a logical router to obtain routes to other subnets either using static routes that you manually define, or through participation in Layer 3 routing protocols (dynamic routes). Each Layer 3 interface, loopback interface, and VLAN interface defined on the firewall must be associated with a logical router. Each interface can belong to only one logical router.

The logical router is available after you enable Advanced Routing in the General Settings of DeviceSetupManagement and then commit and reboot the firewall.

Defining a logical router requires that you add Layer 3 interfaces to the logical router and configure any combination of static routes and dynamic routing protocols, as required by your network. You can also configure other features, such as ECMP and BFD.