Home >Documents >Security Tutorial v3.0.0 > 2. Operation > 2.2. Managed Firewall / Managed UTM Version2 > 2.2.13. IPsec Settings >2.2.13.3. IPsec Routing

2.2.13.3. IPsec Routing

Set up a static route to the VPN tunnel created by IPsec Setting.

2.2.13.3.1. Default Value : IPsec Routing

In default setting, any route for the user network is not set.
You need to set up Ipsec Routing depending on your own environment.

2.2.13.3.2. Setting Items : IPsec Routing

The following items are necessary for the IPsec Routing.

Items

Values

Descriptions

ID

(Auto-Assign)

This ID is automatically assigned.

Destination IP Address

 xxx.xxx.xxx.xxx

Input a Destination IP Address with decimal notation.

Subnet Mask

 xxx.xxx.xxx.xxx

Input the Destination Subnet mask with decimal notation.
Blackhole Routing

Enable or Disable
Select whether to enable or disable Black hole Routing (*).
Enable：Enable Black hole Routing
Disable：Disable Black hole Routing

Interface

 Tunnel[1-15]

When Black hole Routing is [Disable], select the tunnel interface for which you want to configure this routing. It is not displayed when Black hole Routing is [Enable].
Comment

（Half-width alphabetic characters & half-width numbers)

Input the comments as necessary. You can not use the two-byte characters such as Japanese, within 225 words.

Note

  • If there is a default route, packets may be routed to unexpected destinations when tunneling down. By setting Blackhole Routing it is possible to prevent packets from being misdirected out of the tunnel when tunnel is down.



2.2.13.3.2.1. Prohibited IP address

The IP addresses below are not available for Interface, Routing, Address Objects, Destination NAT and Source NAT.
If these IP addresses are used, the operation may cause some error.
  • 100.65.0.0/16
  • 100.66.0.0/15
  • 100.68.0.0/14
  • 100.72.0.0/14
  • 100.76.0.0/15
  • 100.78.0.0/16
  • 100.80.0.0/13
  • 100.88.0.0/15
  • 100.91.0.0/16
  • 100.92.0.0/14
  • 100.126.0.0/15


2.2.13.3.3. Adding IPsec Routing

1.Click IPsec Routing from the object screen on the left side of the screen.
Object ‣ IPsec VPN ‣ IPsec Routing

Click [Add] on the IPsec Routing screen on the right side of the screen.
Ipsec Routing Add

2.Click [ Save ] after you input the setting value.
For details of setting items, refer to IPsec Routing : Setting Items
Ipsec Routing Parameter

3.Apply configuration to the device by clicking [Save].
変更の保存


2.2.13.3.4. IPsec Routing Change （Edit / Duplicate / Remove）

1.Click IPsec Routing from the object screen on the left side of the screen.
Object ‣ IPsec VPN ‣ IPsec Routing

Select the target changed line at Routing screen of the right-side. Click an operation button you need.
Ipsec Routing Change

Following describes respective buttons of IPsec Routing .

Buttons

Descriptions

Edit

Modify the value of Routing that has already been set.

Duplicate
After duplicating the existing Ipsec Routing , the object setting screen will open with the same value.
This is useful for you to define another Routing with the same value.

Remove

Delete the selected Routing .

When you deleting one , the confirmation message will display. Please click [OK] to finally execute its deletion.
Ipsec Setting Change

2.Click [Apply configuration] to apply the settings to the device.
変更の保存
2.2.13.2. IPsec Setting
2.2.13.4. IPsec Policy