FTD Static Route in HA Pair

[benolyndav]

Hi

Can anyone tell me why when I added a static route to FTD 2130 in HA pair I get tunnelled false in the route see below image I don't see these in other static routes, also to add a static route do I go into each HA device separately to add route or just select HA and add.??? 

[Rob Ingram]

Hi,

The screenshot is not visible, please re-attach. Are you using FDM or FMC to manage?

Regardless, as it is an HA pair, you only configure a static route once, this configuration gets applied to the secondary device.

[benolyndav]

Hi

I have attached I hope you can see it better

Thank you

[Rob Ingram]

Ok, I understand now. A "tunneled" route is used for VPNs, but only for a different default route for tunneled traffic. In my lab if the route is tunneled it's marked as "true", if it is not tunneled there is nothing, it does not mention "false". Perhaps it's changed on older or newer versions, I am running FMC 6.5.0.4. What version are you running?

[benolyndav]

Hi Rob

we are also running 6.5.0.4

[Rob Ingram · Accepted solution]

Interesting. I added a new static route, it added "false" under tunneled. I then amended an existing static route, which said neither "true" or "false", it then changed to "false". I can only assume that initially these routes were defined on an older FMC version (pre-patch) and cisco have added "false" in a recent upgrade.

[benolyndav]

Hi 

Sorry forgot to add using FMC to manage