topic Re: FTD Static Route in HA Pair in Network Security

FTD Static Route in HA Pair

benolyndav — Fri, 07 Aug 2020 12:09:06 GMT

Can anyone tell me why when I added a static route to FTD 2130 in HA pair I get tunnelled false in the route see below image I don't see these in other static routes, also to add a static route do I go into each HA device separately to add route or just select HA and add.???

Re: FTD Static Route in HA Pair

Rob Ingram — Fri, 07 Aug 2020 12:23:32 GMT

Hi,

The screenshot is not visible, please re-attach. Are you using FDM or FMC to manage?

Regardless, as it is an HA pair, you only configure a static route once, this configuration gets applied to the secondary device.

Re: FTD Static Route in HA Pair

benolyndav — Mon, 10 Aug 2020 07:52:09 GMT

I have attached I hope you can see it better

Thank you

Re: FTD Static Route in HA Pair

benolyndav — Fri, 07 Aug 2020 18:59:21 GMT

Sorry forgot to add using FMC to manage

Re: FTD Static Route in HA Pair

Rob Ingram — Mon, 10 Aug 2020 08:04:25 GMT

Ok, I understand now. A "tunneled" route is used for VPNs, but only for a different default route for tunneled traffic. In my lab if the route is tunneled it's marked as "true", if it is not tunneled there is nothing, it does not mention "false". Perhaps it's changed on older or newer versions, I am running FMC 6.5.0.4. What version are you running?

Re: FTD Static Route in HA Pair

benolyndav — Mon, 10 Aug 2020 08:22:45 GMT

Hi Rob

we are also running 6.5.0.4

Re: FTD Static Route in HA Pair

Rob Ingram — Mon, 10 Aug 2020 08:28:12 GMT

Interesting. I added a new static route, it added "false" under tunneled. I then amended an existing static route, which said neither "true" or "false", it then changed to "false". I can only assume that initially these routes were defined on an older FMC version (pre-patch) and cisco have added "false" in a recent upgrade.