Description
The system has a predefined main routing table. Alternate routing tables can be defined by the user.
Properties
- Name
- Specifies a symbolic name for the routing table. (Identifier)
- AllowHARoutes
- Defines if the routing table is allowed to contain HA node local routes. (Default: No)
- Ordering
- Specifies how a route lookup is done in a named routing table. (Default: Only)
- Comments
- Text describing the current object. (Optional)
Description
A route defines what interface and gateway to use in order to reach a specified network.
Properties
- Name
- Specifies a symbolic name for the object. (Optional)
- Interface
- Specifies which interface packets destined for this route shall be sent through.
- Gateway
- Specifies the IP address of the next router hop used to reach the destination network. If the network is directly connected
to the firewall interface, no gateway address is specified. (Optional)
- LocalIP
- The IP address specified here will be automatically published on the corresponding interface. This address will also be used
as the sender address in ARP queries. If no address is specified, the firewall's interface IP address will be used. (Optional)
- MTU
- Specifies the size (in bytes) of the largest packet excluding any Ethernet headers, that can be passed using the route. (Default: InheritFromInterface)
- AdvertiseIP6
- Enable IPv6 Router Advertisement announcing for this route. (Default: No)
- AdvertisedValidLifetime
- The value to be placed in the Valid Lifetime in the Prefix Information option, in seconds. The designated value of all 1's
(0xffffffff) represents infinity. (Default: 2592000)
- AdvertisedAsOnLinkFlag
- The value to be placed in the on-link flag (L-bit) field in the Prefix Information option. Indicated that this prefix can
be used for on-link determination. (Default: Yes)
- AdvertisedPreferredLifetime
- The value to be placed in the Preferred Lifetime in the Prefix Information option, in seconds. The designated value of all
1's (0xffffffff) represents infinity. (Default: 604800)
- AdvertisedAsAutonomousFlag
- The value to be placed in the Autonomous Flag field in the Prefix Information option. Indicates that the advertised prefix
can be used for stateless address configuration. (Default: Yes)
- RouteMonitor
- Control the status (enabled/disabled) of the route through the use of various monitoring methods. (Default: No)
- MonitorHosts
- Monitor route through the availability of a set of hosts. (Default: No)
- MonitorGateway
- Monitor the gateway of the route. (Default: No)
- GatewayMonitorInterval
- Delay in milliseconds between each attempt to monitor the gateway. (Optional)
- MinReachability
- Minimum number of hosts required to be reachable for the route to be enabled. (Default: One)
- GracePeriod
- Delay in seconds after system start before starting to monitor the route. (Optional)
- GratuitousARPNDOnChange
- Send gratuitous ARP/ND on failover to alert hosts about changed interface Ethernet and IP addresses. (Default: Yes)
- Network
- Specifies the network address for this route.
- Metric
- Specifies the metric for this route. (Default: 100)
- ProxyARPAllInterfaces
- Always select all interfaces, including new ones, for publishing routes via Proxy ARP. (Default: No)
- ProxyARPInterfaces
- Specifies the interfaces on which the firewall should publish routes via Proxy ARP. (Optional)
- Comments
- Text describing the current object. (Optional)
![[Note]](images/note.png) |
Note |
If no Index is specified when creating an instance of this type, the object will be placed last in the list and the Index will be equal to the length of the list.
|
Description
Specify a host and a monitoring method.
Properties
- MonitoringMethod
- Monitoring method. (Default: ICMP)
- IPAddress
- IP address of host.
- OriginatorIP
- Originator/source IP when monitoring the host. (Optional)
- HostMonitorInterval
- Delay in milliseconds between each monitor attempt. (Optional)
- Samples
- Required number of monitoring samples/attempts before determining the status of the host. (Default: 10)
- MaxFailedSamples
- The maximum number of failed samples/attempts before the host is marked as unreachable. (Default: 2)
- MaxLatency
- Maximum average latency before the host is marked as unreachable. (Default: 800)
- ReachabilityRequired
- Specifies whether the host is required to be reachable for host monitoring to be successful. (Default: No)
- Comments
- Text describing the current object. (Optional)
![[Note]](images/note.png) |
Note |
If no Index is specified when creating an instance of this type, the object will be placed last in the list and the Index will be equal to the length of the list.
|
Description
A HA enabled route. Can be set individually for each HA node.
Properties
- Name
- Specifies a symbolic name for the object. (Optional)
- MasterInterface
- Specifies which interface, on the Master node of an HA cluster, packets destined for this route shall be sent through.
- SlaveInterface
- Specifies which interface, on the Slave node of an HA cluster, packets destined for this route shall be sent through.
- Gateway
- Specifies the IP address of the next router hop used to reach the destination network. If the network is directly connected
to the firewall interface, no gateway address is specified. (Optional)
- LocalIP
- The IP address specified here will be automatically published on the corresponding interface. This address will also be used
as the sender address in ARP queries. If no address is specified, the firewall's interface IP address will be used. (Optional)
- MTU
- Specifies the size (in bytes) of the largest packet excluding any Ethernet headers, that can be passed using the route. (Default: InheritFromInterface)
- Network
- Specifies the network address for this route.
- Metric
- Specifies the metric for this route. (Default: 100)
- ProxyARPAllInterfaces
- Always select all interfaces, including new ones, for publishing routes via Proxy ARP. (Default: No)
- ProxyARPInterfaces
- Specifies the interfaces on which the firewall should publish routes via Proxy ARP. (Optional)
- Comments
- Text describing the current object. (Optional)
![[Note]](images/note.png) |
Note |
If no Index is specified when creating an instance of this type, the object will be placed last in the list and the Index will be equal to the length of the list.
|
Description
A routing table export rule creates a filter to select statically configured routes. The filtered routes can then through
action rules be exported to "route distribution services" such as OSPF.
Properties
- Name
- Specifies a symbolic name for the rule. (Optional)
- DestinationInterface
- Specifies an interface which filtered routes need to match. (Optional)
- DestinationNetworkExactly
- Specifies a network range which filtered routes need to match exactly. (Optional)
- DestinationNetworkIn
- Specifies a network range which filtered routes need to be within. (Optional)
- NextHop
- Specifies the next (router) hop which filtered routes need to match. (Optional)
- MetricRange
- Specifies a metric interval which filtered routes need to be within. (Optional)
- LogEnabled
- Enable logging. (Default: Yes)
- Comments
- Text describing the current object. (Optional)
![[Note]](images/note.png) |
Note |
If no Index is specified when creating an instance of this type, the object will be placed last in the list and the Index will be equal to the length of the list.
|