Skip to main content
BusinessUser
Explorer
January 19, 2024
Question

How do I add this ip range 10.212.134.200-240 in static route

  • January 19, 2024
  • 5 replies
  • 4156 views

I want this particular ip range to be added into static route via vpn tunnel. 

How do I do this? 

5 replies

Toshi_Esumi
SuperUser
SuperUser
January 19, 2024

Routing table can't have a "range of IPs". They have to be subnets. If you have to set routes to cover exact that range, you have to chuck them up to multiple subnets.
10.212.134.200/29
10.212.134.208/28

10.212.134.224/28
So three static routes. But why do you need it to be exact that range? You can either change the SSL VPN client IP range (I'm assuming that's the purpose of this range) to be bigger or smaller to fits in one subnet boundaries, or just route 10.212.134.128/25 if the reset is not used.

 

Toshi

BusinessUser
Explorer
January 20, 2024

For this range (10.212.134.200-240) i added  10.212.134.0/24 as subnet for static route to the remote vpn tunnel. 

 

Why didnt it work?

AEK
SuperUser
SuperUser
January 20, 2024

In your VPN phase 2 config, make sure you have entered the local and remote subnets that will communicate.

AEK
SonaMuvv
Staff
Staff
July 22, 2024

In case if you are using named address object 10.212.134.0/24, make sure to enable allow routing option, which will list this address object in the static route named address field.

config firewall address

edit <address_name>

set allow-routing enable

end

 

Regards,

Sonali

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!