Routing¶
Where: Connectivity > Routing.
The page has three tabs: Static routes, Policy-based routing and Dynamic routing.
Static routes¶
A static route tells the gateway how to reach a network that is not directly attached. Subnets on the gateway's own interfaces need no route.
Adding a route¶
Click Add route:
| Field | Meaning |
|---|---|
| Family | IPv4 or IPv6 |
| Destination network | A network address, or default for the default route |
| Mask / prefix | 255.255.255.0, /24 or a prefix length (/64 for IPv6). Empty for a default route |
| Gateway | The next hop, reachable on an attached subnet and of the same family |
| Interface | Leave at Automatic (by gateway) unless the route must be pinned to one interface |
| Metric | 2 to 255; lower wins between two routes to the same place. Empty lets the system choose |
| Description | Optional |
With none, the tab says No static routes configured.
Editing, switching off and removing¶
Click a row to open Edit route. The switch in the State column turns a route Active or Inactive without deleting it; ✕ removes it. A route switched off or removed is withdrawn from the device on the next apply.
The gateway withdraws only routes it installed. A route learned from DHCP or added over the console is left alone and cannot be removed here.
Changing the default route can cut the gateway off
The default route is how the gateway reaches the platform. If a change makes it unreachable, do not confirm it: the device rolls back, routes included, when the confirm window expires. See History.
IP forwarding (router mode)¶
Under Advanced settings on this tab. Forwarding is what lets a LAN behind the device reach the internet; it maps to net.inet.ip.forwarding. It is on by default, and the section opens by itself, flagged Off — this device is not routing., when it is off.
Security policy rules decide which interface may route to which; turning forwarding on opens nothing by itself.
Turning it off
Every LAN behind the device loses internet access, while the device still answers on its own addresses and so looks up. The portal asks you to confirm with Turn off routing.
Policy-based routing¶
Lists firewall rules that send traffic to a specific next hop, chosen by where it came from rather than where it is going. These are set on a firewall rule; Edit on the security policy page opens Security policy.
Dynamic routing¶
The device speaks OSPFv2.
- Switch on Dynamic routing.
- Optionally set Router ID (leave empty to let the device pick) and Area (
0.0.0.0, the backbone, unless told otherwise). - For each interface, switch on Use and choose a Mode:
- Announce only — advertises the network, exchanges no routes.
- Exchange routes — set a Shared key. Without one, the page warns that anything on that network can tell this device where to send traffic.
- Share this device's static routes with neighbours is off by default; turn it on only if every neighbour should see them.
Checking a route¶
Diagnostics runs Ping and Traceroute from the gateway itself.