Skip to main content
capricorn80
capricorn80
New Member
February 11, 2019
Solved

Purpose of adding static route for ssl vpn subnet to ssl.root interface?

  • February 11, 2019
  • 2 replies
  • 11911 views

Hi!

 

I am running tunnel mode ssl vpn without adding static route of my SSL VPN subnet pointing to ssl.root and everything works fine.

 

whats the use of setting up this static route?

 

thanks

    Best answer by Toshi_Esumi

    That's another reason if you have other routers/firewalls relying on redistributed routes from the FGT over a routing protocol, if the FGT is not their default GW.

    2 replies

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    February 11, 2019

    The reason is to allow inside devices/applications reach the clients from their ends. Especially when the client machine is running some UDP based applications connected to a server, which needs to send spontaneous updates or something periodically or on-demand, the server can't reach the client to deliver the UDP packets.

     

    capricorn80
    capricorn80Author
    New Member
    February 13, 2019

    ok Thanks for the information. I guess it can also be used for BGP rourte distribution?

    Toshi_Esumi
    SuperUser
    Toshi_EsumiAnswer
    SuperUser
    February 13, 2019

    That's another reason if you have other routers/firewalls relying on redistributed routes from the FGT over a routing protocol, if the FGT is not their default GW.

    Sloanstar
    Sloanstar
    New Member
    February 20, 2019

    Maybe if you are running OSPF and redistributing statics and the FGT isn't on your default egress path?

     

    Edit:

    Sorry. I hadn't changed my view mode to flat, i thought this was unanswered.

    Terms & ConditionsAccessibility statement