(maximum of 63 characters).
The name must start with an alphanumeric character, underscore (_),
or hyphen (-), and can contain a combination of alphanumeric characters,
underscore, or hyphen. No dot (.) or space is allowed.
, enter the
route and netmask (for example, 192.168.2.0/24 for an IPv4 address
or 2001:db8:123:1::0/64 for an IPv6 address). If you’re creating
a default route, enter the default route (0.0.0.0/0 for an IPv4
address or ::/0 for an IPv6 address). Alternatively, you can select
or create an address object of type IP Netmask.
, specify the
outgoing interface for packets to use to go to the next hop. Specifying
an interface provides stricter control over which interface the
firewall uses rather than using the interface in the route table
for the next hop of this static route.
, select one of
—Enter the IP address (for example, 192.168.56.1
or 2001:db8:49e:1::1) when you want to route to a specific next
hop. You must
and enter the IP address
for your internet gateway (for example, 192.168.56.1 or 2001:db8:49e:1::1).
Alternatively, you can create an address object of type IP Netmask.
The address object must have a netmask of /32 for IPv4 or /128 for
—Select to make the next logical
router (in the list of logical routers) the next hop.
—Enter a Fully Qualified Domain Name.
—Select to drop packets that are
addressed to this destination.
—Select if there is no next hop for
the route. For example, a point-to-point connection does not require
a next hop because there is only one way for packets to go.
static route (range is 10 to 240; default is 10). This value overrides
distance specified for the logical router.
for the static
route (range is 1 to 65,535; default is 10).
) Configure path monitoring for the
static route; you can monitor up to 128 static routes.
allow configuration of path monitoring (default is disabled).
path monitoring (default
whether path monitoring for the static route is based on one (any)
or all monitored destinations. Select whether
the monitored destinations for the static route must be unreachable
by ICMP for the firewall to remove the static route from the RIB
and FIB and add the static route that has the next lowest metric
(going to the same destination) to the FiB.
avoid the possibility of any single monitored destination signaling
a route failure when the destination is simply offline for maintenance,
) Specify the
Hold Time (min)
, the number of minutes a downed path
monitor must remain in Up state before the firewall reinstalls the
static route into the RIB; range is 0 to 1,440; default is 2. A
setting of 0 (zero) causes the firewall to reinstall the route into
the RIB immediately upon the path monitor coming up.
The path monitor evaluates all of its monitored destinations
for the static route and comes up based on the
condition. If a link goes down or flaps during the hold time, when
the link comes back up, the path monitor resumes and the Preemptive
Hold Time is reset, causing the timer to restart from zero.
a path monitoring destination
the path monitoring
, select the IP
address that the firewall uses in the ICMP ping to the monitored
If an interface has multiple IP addresses, select
If you select an interface, the firewall uses the first IP address
assigned to the interface by default.
If you select
DHCP (Use DHCP Client address)
the firewall uses the address that DHCP assigned to the interface.
To see the DHCP address, select
in the row for the Ethernet interface, click on
. The IP Address displays in the Dynamic IP Interface
, enter an
IP address or address object to which the firewall will monitor
the path. The monitored destination and static route destination
must use the same address family (IPv4 or IPv6).
The destination IP address should belong
to a reliable endpoint; you shouldn’t base path monitoring on a
device that itself is unstable or unreliable.
) Specify the ICMP
in seconds to determine how frequently
the firewall monitors the path (range is 1 to 60; default is 3).
) Specify the ICMP
of packets that don’t return from the destination
before the firewall considers the static route down and removes
it from the RIB and FIB (range is 3 to 10; default is 5).
to save the path monitor
twice to save the
) Control the static routes that are
placed in the global RIB.
You might configure static routes and redistribute them,
but not want them in the protocol’s local route table or global
RIB. You might want to add only specific static routes to the global
select a logical router.
routes into or prevent routes from being added to the global RIB.
To filter IPv4 static routes and connected routes,