Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/19.5/Help/en-us/webhelp/onlinehelp/index.html?contextId=routing-static-routing-add-unicast-route

Add a unicast route

You can configure the firewall to forward IPv4 and IPv6 unicast traffic.

To add a unicast route, do as follows:

  1. Go to Routing > Static routing.
  2. Under IPv4 unicast route, click Add.

  3. Enter the unicast route details.

    Option Description
    Destination IP/netmask Enter the destination IP address and subnet mask.
    Gateway Enter the gateway address.
    Interface Select the Sophos Firewall interface through which traffic must exit.
    Administrative distance Enter a number. It determines the best route among the different routing protocols. Lower numbers carry higher priority.

    Example: Sophos Firewall tries to send traffic over a route with a distance of 1 rather than 5.
    Metric Enter a number. It determines the best route among static routes.

    Note

    If you configure a static route for a RED site-to-site tunnel, you can't select an interface. Instead, you must specify the IP address of the peer RED site-to-site tunnel.

  4. Click Save.

  1. Go to Routing > Static routing.
  2. Under IPv6 unicast route, click Add.

  3. Enter the unicast route details.

    Option Description
    Destination IP/netmask Enter the destination IP address and subnet mask.
    Gateway Enter the gateway address.
    Interface Select the Sophos Firewall interface through which traffic must exit.
    Metric Enter a number. It determines the best route among static routes.

    Note

    If you configure a static route for a RED site-to-site tunnel, you can't select an interface. Instead, you must specify the IP address of the peer RED site-to-site tunnel.

  4. Click Save.

More resources