The firewall requires a virtual router to obtain routes to other subnets either using static routes that you manually define, or through participation in Layer 3 routing protocols (dynamic routes). Each Layer 3 interface, loopback interface, and VLAN interface defined on the firewall must be associated with a virtual router. Each interface can belong to only one virtual router.

Defining a virtual router requires general settings and any combination of static routes or dynamic routing protocols, as required by your network. You can also configure other features such as route redistribution and ECMP.