Routes - Secure Computing SG300 User Manual

Ensure that the remote GRE end point responds to pings. Note that by default no
packets are routed across the GRE tunnel unless there is a route set up on the GRE
tunnel.

Routes

To configure the SnapGear unit's advanced routing features, click the Routes tab on the
Network Setup page.
Static routes
Here you can add additional static routes for the SnapGear unit. These routes are
additional to those created automatically by the SnapGear unit configuration scripts.
Click New to add a static route. Target Address and Subnet mask identify the
destination network or host. You may also specify an Interface out which the network
traffic should be routed, a Gateway Address through which the network traffic should be
routed, and a Metric for this route.
Policy routes
Here you can modify an existing policy route or create a new policy route. A policy route
allows packets to be routed via a specific gateway based on their incoming interface,
source address, destination address, and service.
Click New to add a policy route and check Enable. Type is the type of policy route, which
controls whether the incoming interface options are available. Select Forward to route
forwarded packets only (with this option you can select the incoming interface). Select
Output to route packets generated by this unit (you canot select the incoming interface
with this option set). Select the Services of the packet, and the Gateway, which is the
Internet connection to use as the gateway.
Enter the Incoming Interface address that this unit received the packet on, you can also
select Any (to match packets received on any interface, but do not match packets
generated by this unit), or None (only match packets generated by this unit).
Enter the Source Address that matches the source IP address of the packet. When you
click New, you can create an address definition when you create this route.
Enter the Destination Address that matches the destination IP address of the packet.
When you click New, you can create an address definition when you create this route.
Network Setup
106