Contents

Related Topics

Add Routes for a Tunnel

To add routes for traffic through a branch office VPN tunnel, you add a tunnel route that specifies the local and remote IP addresses for the route.

You can configure an unlimited number of tunnel routes, but the number of tunnel routes that can be active on the Firebox at the same time is limited by the device feature key. For more information, see VPN Tunnel Capacity and Licensing.

To add a tunnel route, from Fireware Web UI:Closed
  1. On the Addresses tab of the Tunnel dialog box, click Add.
    The Tunnel Route Settings dialog box appears.

Screen shot of the Tunnel Route Settings dialog box

  1. In the Local IP section, select the type of local address from the Choose Type drop-down list. Then type the value in the adjacent text box. You can enter a host IP address, network address, a range of host IP addresses, or a DNS name.
  2. In the Remote IP section, select the type of remote address from the Choose Type drop-down list. Then type the value in the adjacent text box. You can enter a host IP address, network address, a range of host IP addresses, or a DNS name.
  3. In the Direction drop-down list, select the direction for the tunnel. The tunnel direction determines which direction traffic can flow through the tunnel.
  4. If you want to enable broadcast routing over this tunnel, select the Enable broadcast routing over the tunnel check box. For more information, see Enable Broadcast Routing Through a Branch Office VPN Tunnel.
  5. You can use the NAT tab to enable 1-to-1 NAT and dynamic NAT for the tunnel if the address types and tunnel direction you selected are compatible. For more information, see Configure Outgoing Dynamic NAT Through a Branch Office VPN Tunnel and Configure 1-to-1 NAT Through a Branch Office VPN Tunnel.
  6. Click OK.
To add a tunnel route, from Policy Manager:Closed
  1. On the Addresses tab of the New Tunnel dialog box, click Add.
    The Tunnel Route Settings dialog box appears.

Screen shot of the Tunnel Route Settings dialog box

  1. From the Local drop-down list, select the local address you want.
    You can also click the button adjacent to the Local drop-down list to enter a host IP address, network address, a range of host IP addresses, or a DNS name.
  2. In the Remote box, type the remote network address.
    You can also click the adjacent button to enter a host IP address, network address, a range of host IP addresses, or a DNS name.
  3. In the Direction drop-down list, select the direction for the tunnel. The tunnel direction determines which direction traffic can flow through the tunnel.
  4. If you want to enable broadcast routing over this tunnel, select the Enable broadcast routing over the tunnel check box. For more information, see Enable Broadcast Routing Through a Branch Office VPN Tunnel.
  5. You can use the NAT tab to enable 1-to-1 NAT and dynamic NAT for the tunnel if the address types and tunnel direction you selected are compatible. For more information, see Configure Outgoing Dynamic NAT Through a Branch Office VPN Tunnel and Configure 1-to-1 NAT Through a Branch Office VPN Tunnel.
  6. Click OK.

Give Us Feedback  •   Get Support  •   All Product Documentation  •   Technical Search

© 2018 WatchGuard Technologies, Inc. All rights reserved. WatchGuard, the WatchGuard logo, WatchGuard Dimension, Firebox, Core, Fireware, and LiveSecurity are registered trademarks or trademarks of WatchGuard Technologies in the United States and/or other countries.