The firewall requires a logical router to obtain routes to other subnets either using static routes that you manually define, or through participation in Layer 3 routing protocols (dynamic routes). Each Layer 3 interface, loopback interface, and VLAN interface defined on the firewall must be associated with a logical router. Each interface can belong to only one logical router.

The logical router is available after you enable

Advanced Routing

in the General Settings of

Device

Setup

Management

and then commit and reboot the firewall.

Defining a logical router requires that you add Layer 3 interfaces to the logical router and configure any combination of static routes and BGP routing, as required by your network. You can also configure other features, such as ECMP.