Configure Static Route (LAN Route)

• Static routes can be configured under VPN > Static Routes.

Prerequisites

• You can only configure a Static Route after the VPN has been assigned to the location where the Static Route is to be configured and at least one VLAN has been configured.
• On the LAN router/firewall at the location, you must configure the gateway address of the corresponding VLAN as the default route (Example: 0.0.0.0/0 via 10.103.3.254 or ::/0 via an IPv6 gateway).
• To configure static routes with IPv6, IPv6 must be enabled on the assigned VPN and configured on the VLAN. For more information, see:
  • Configure IPv6 on an Access VPN
  • Configure IPv6 on a VLAN
• How to get into the ordering process: Order Management
• Guidance on: Assign, configure and connect VPNs
• Guidance on: VPN (Groups) creating and assigning groups

Behaviour and limitations

• Static routes can be configured with IPv4 and IPv6 addresses.
• You can configure up to 500 static routes per customer network.
• You can use a maximum of 5 different next hop addresses per location.
• The maximum number of next hop addresses at all locations of a customer network is limited to 500.

Configuration

---

1. Under VPN > select the corresponding VPN.
2. Select Static Routes.
3. Click Add LAN Routing Gateway.
4. Select the Location where the static route is to be configured.
5. Select the IP Version (IPv4 or IPv6).
6. Configure the Gateway IP address (IPv4 or IPv6) that is configured on the LAN router/firewall WAN interface at the location.
7. Confirm and save the entry.
8. Expand the LAN gateway to configure one or more LAN routes that you want to statically connect to the VPN.
9. Disable the toggle "Redistribute into WAN" if you want to prevent advertisement of the static route in the WAN.
10. Click on save and send the order.

note

The toggle "Redistribute to WAN" on a Static or Connected Route (VLAN) is not available if Expert Mode is activated and the subnet overlaps with another subnet or is the same.