Skip to main content
HS08
HS08
Visitor III
September 28, 2025
Solved

VPN site to site route

  • September 28, 2025
  • 2 replies
  • 587 views

When we build VPN site to site we defince local and remote subnet, and also there are option to add route.

When we enable the add route option why we still need make static route?

If no static route I'm not able access to the remote subnet.

Best answer by funkylicious

add-route is mostly used in dial-up environments on the hub side to learn and insert into FIB/RIB from phase-2 selectors

https://docs.fortinet.com/document/fortigate/7.4.7/administration-guide/534155 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-add-automatic-route-towards-the-remote/ta-p/213569 

2 replies

funkylicious
SuperUser
funkyliciousAnswer
SuperUser
September 28, 2025

add-route is mostly used in dial-up environments on the hub side to learn and insert into FIB/RIB from phase-2 selectors

https://docs.fortinet.com/document/fortigate/7.4.7/administration-guide/534155 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-add-automatic-route-towards-the-remote/ta-p/213569 

"jack of all trades, master of none"
HS08
HS08Author
Visitor III
September 29, 2025

so the add-route is not suitable for non dial-up vpn connection, right?

hpenmetsa
Staff
hpenmetsa
Staff
September 29, 2025

Hi, The `add-route` option is primarily used for dynamic (dial-up) VPN connections. It is designed to automatically add routes to the FortiGate routing information base when the dynamic tunnel is negotiated. While it is mainly associated with dial-up VPNs, it can also be configured in both policy-based and route-based IPsec VPNs. However, its primary use case is for dynamic connections where routes need to be dynamically managed.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-add-automatic-route-towards-the-remote/ta-p/213569

Terms & ConditionsAccessibility statement