topic Re: 2110 Static Route in Network Security

2110 Static Route

daczone2020 — Tue, 26 Nov 2019 23:18:32 GMT

New NGFW user here.

In the Juniper World, I have a simple static route:

route 10.8.0.0/24 next-hop 10.1.1.90;

(10.8.0.x is the IP used by my VPN server and handed to the client) and 10.1.1.90 is the IP of my VPN server. Since 10.8.0.x doesn't live on my network)

I am struggling to get this route added:

> show interface inside
Interface Ethernet1/2 "inside", is up, line protocol is up
Hardware is EtherSVI, BW 1000 Mbps, DLY 10 usec
MAC address 5c71.0de7.e8ed, MTU 1500
IP address 10.1.1.1, subnet mask 255.255.255.0

> configure network static-routes ipv4 add inside 10.8.0.0 255.255.255.0 10.1.1.90
Error: Interface supplied (inside) is either not yet configured or does not exist.

> configure network static-routes ipv4 add Ethernet1/2 10.8.0.0 255.255.255.0 10.1.1.90
Error: Interface supplied (Ethernet1/2) is not valid.

Re: 2110 Static Route

Rob Ingram — Tue, 26 Nov 2019 23:32:46 GMT

Hi,
The CLI is only used to configure the management interface, you would configure the data interfaces using either the built in local WebGUI (FDM) or if managed centrally, the FMC.

If you are using FDM manage the FTD local this guide should help. Define the management IP and default gateway, configure management type as local and then connect to the WebGUI to configure the firewall.

HTH

Re: 2110 Static Route

daczone2020 — Tue, 26 Nov 2019 23:40:24 GMT

I have it working. DHCP Pool, Inside and outside interface, Just need that static route in place.

Re: 2110 Static Route

Rob Ingram — Tue, 26 Nov 2019 23:51:33 GMT

So you are using FDM? If so login to the FDM GUI, go to the Routing summary page and create a static route. Link to guide.

Re: 2110 Static Route

daczone2020 — Wed, 27 Nov 2019 16:15:41 GMT

The GUI doesn't allow me to add it. So I tried with the CLI. I hate the CLI interface, not like a normal Cisco device.

Just need to add a 1 static route.

Re: 2110 Static Route

Rob Ingram — Wed, 27 Nov 2019 16:25:38 GMT

What is the error then? Provide a screenshot

You have to add the routes using the GUI for the data interfaces.

Re: 2110 Static Route

daczone2020 — Wed, 27 Nov 2019 16:33:05 GMT

Thank You, Amazing what a new day of sleep does for you.

I got it in there. I had to add the Network and Gateway IP address: