- Network > Virtual Routers > Static Routes
Optionally add one or more static routes. Click the IP or IPv6 tab to specify the route using an Pv4 or IPv6 address. It is usually necessary to configure default routes (0.0.0.0/0) here. Default routes are applied for destinations that are otherwise not found in the virtual router’s routing table.
Static Route Settings
Enter a name to identify the static route (up to 31 characters). The name is case-sensitive and must be unique. Use only letters, numbers, spaces, hyphens, and underscores.
Enter an IP address and network mask in Classless Inter-domain Routing (CIDR) notation: ip_address/mask (for example, 192.168.2.0/24 for IPv4 or 2001:db8::/32 for IPv6).
Select the interface to forward packets to the destination, or configure the next hop settings, or both.
Select one of the following:
Specify the administrative distance for the static route (10-240; default is 10).
Specify a valid metric for the static route (1 - 65535).
Select the route table into which the firewall installs the static route:
To enable Bidirectional Forwarding Detection (BFD) for a static route on a PA-3000 Series, PA-5000 Series, PA-5200 Series, PA-7000 Series, or VM-Series firewall, select one of the following:
Select None (Disable BFD) to disable BFD for the static route.
To use BFD on a static route:
Select to enable path monitoring for the static route.
Select the condition under which the firewall considers the monitored path down and thus the static route down:
Preemptive Hold Time (min)
Enter the number of minutes a downed path monitor must remain in Up state—the path monitor evaluates all of its member monitored destinations and must remain Up before the firewall reinstalls the static route into the RIB. If the timer expires without the link going down or flapping, the link is deemed stable, path monitor can remain Up, and the firewall can add the static route back into the RIB.
If the link goes down or flaps during the hold time, path monitor fails and the timer restarts when the downed monitor returns to Up state. A Preemptive Hold Time of zero causes the firewall to reinstall the static route into the RIB immediately upon the path monitor coming up. Range is 0-1,440; default is 2.
Enter a name for the monitored destination (up to 31 characters).
Select to enable path monitoring of this specific destination for the static route; the firewall sends ICMP pings to this destination.
Select the IP address that the firewall will use as the source in the ICMP ping to the monitored destination:
Enter a robust, stable IP address or address object for which the firewall will monitor the path. The monitored destination and the static route destination must use the same address family (IPv4 or IPv6)
Ping Interval (sec)
Specify the ICMP ping interval in seconds to determine how frequently the firewall monitors the path (pings the monitored destination; range is 1-60; default is 3).
Specify the number of consecutive ICMP ping packets that do not return from the monitored destination before the firewall considers the link down. Based on the Any or All failure condition, if path monitoring is in failed state, the firewall removes the static route from the RIB (range is 3-10; default is 5).
For example, a Ping Interval of 3 seconds and Ping Count of 5 missed pings (the firewall receives no ping in the last 15 seconds) means path monitoring detects a link failure. If path monitoring is in failed state and the firewall receives a ping after 15 seconds, the link is deemed up; based on the Any or All failure condition, path monitoring to Any or All monitored destinations can be deemed up, and the Preemptive Hold Time starts.
Configure Path Monitoring for a Static Route
Configure Path Monitoring for a Static Route Use the following procedure to configure Static Route Removal Based on Path Monitoring . Enable path monitoring for ...
Static Route Removal Based on Path Monitoring
Static Route Removal Based on Path Monitoring You can now use path monitoring so the firewall removes static route table entries when the link connection ...
Static Route Removal Based on Path Monitoring
Static Route Removal Based on Path Monitoring When you Configure Path Monitoring for a Static Route , the firewall uses path monitoring to detect when ...
Routing Tab The following table describes the virtual router’s runtime stats for the Route Table , Forwarding Table , and the Static Route Monitoring table. ...
Static Route Overview
Static Route Overview If you decide that you want specific Layer 3 traffic to take a certain route without participating in IP routing protocols, you ...
Configure a Static Route
Configure a Static Route Perform the following task to configure Static Routes or a default route for a virtual router on the firewall. Configure a ...
BFD for Static Routes
BFD for Static Routes To use BFD on a static route, both the firewall and the peer at the opposite end of the static route ...
MP-BGP BGP supports IPv4 unicast prefixes, but a BGP network that uses IPv4 multicast routes or IPv6 unicast prefixes needs multiprotocol BGP (MP-BGP) in order ...
BFD Overview BFD is a protocol that recognizes a failure in the bidirectional path between two forwarding engines, such as interfaces, data links, or the ...