Kaspersky SD-WAN

Adding a static route

In addition to dynamic route exchange between CPE devices and external network devices via BGP and OSPF protocols, Kaspersky SD-WAN supports static IPv4 routes. You can add a static route in a CPE template or on a CPE device. A static route added to the CPE template is automatically added to all CPE devices that use this CPE template.

To add a static route:

1. Add a static route in one of the following ways:
   • If you want to add a static route in a CPE template, go to the SD-WAN → CPE templates menu section, click the CPE template, and select the Static routes tab.
   • If you want to add a static route on a CPE device, go to the SD-WAN → CPE menu section, click the CPE device, and select the Static routes tab and select the Override check box.

   A table of static routes is displayed.

2. Click + Add.
3. In the VRF drop-down list, select a virtual routing and forwarding table. This is a required setting.
4. In the Interface drop-down list, select the created source network interface of the static route. This is a required setting if VRF main/254 is selected as the virtual routing and forwarding table.

   The list of interfaces that can be selected depends on the VRF selected at the previous step. You can select only those interfaces that belong to the selected VRF other than main/254, and any interfaces from VRF main/254.

5. In the Destination field, enter the destination IPv4 address of the static route.
6. If necessary, in the IPv4 netmask field, enter the IPv4 address of the destination subnet of the static route.
7. In the Gateway field, enter the IPv4 address of the gateway of the static route.

   You cannot specify a value in this field if in the Type list, the blackhole route type is selected.

8. In the Metric field, enter a metric for the static route. Default value: 0.

   You cannot specify a value in this field if in the Type list, the blackhole route type is selected or if the static route is being created in a virtual routing and forwarding table other than VRF main/254.

9. In the MTU field, enter the MTU value for the static route.

   You cannot specify a value in this field if in the Type list, the blackhole route type is selected or if the static route is being created in a virtual routing and forwarding table other than VRF main/254.

10. In the AD field, enter the administrative distance for the static route.

    You cannot specify a value in this field if the static route is being created in VRF main/254. Default value: 1.

    For the table of correspondence between administrative distances and routing protocols, see the relevant article.

11. In the Type drop-down list, select the type of the static route:
    • unicast. This is the default setting.
    • local Only for VRF main/254.
    • broadcast Only for VRF main/254.
    • multicast Only for VRF main/254.
    • unreachable Only for VRF main/254.
    • prohibit Only for VRF main/254.
    • anycast Only for VRF main/254.
    • blackhole

      If you select the blackhole route type, the Gateway, Metric, and MTU fields become disabled.

      If you need to use the default blackhole route, 0.0.0.0/0, to isolate routes between VRFs, add it for the relevant VRF on the VRF tab in the SD-WAN → CPE templates or SD-WAN → CPE section by selecting Add blackhole route. If you attempt to add such a route on the Static routes tab, an error message is displayed.

    The static route is added and displayed in the table. You can add multiple static routes or delete static routes. To delete a static route, click the delete icon next to it.

12. In the lower part of the settings area, click Save to save the settings of the CPE template or CPE device.