HELP
TABLE OF CONTENTS

Advanced>Routes

If you have routers on your Local Area Network (LAN), Demilitarized Zone (DMZ), or Wide Area Network (WAN), you can configure Static Routes on the SonicWALL.

Current Network Settings

The SonicWALL LAN IP Address, LAN Subnet, WAN IP Address, and WAN/DMZ Subnet are displayed in the Current Network Settings section. Refer to these settings when configuring your Static Routes. The SonicWALL LAN IP Address, LAN Subnet Mask, WAN IP Address and WAN/DMZ Subnet Mask are displayed in the Current Network Settings section. .

Static Routes

Static routes must be defined if the LAN, DMZ, or WAN are segmented into subnets, either for size or practical considerations. For example, a subnet can be created to isolate a section of a company, such as finance, from traffic on the rest of the LAN, DMZ, or WAN.

To add Static Route entries, complete the following instructions:

Enter the destination network of the static route in the Dest. Network field. The destination network is the IP address subnet of the remote network segment.

Tip! If the destination network uses IP addresses ranging from "192.168.1.1" to "192.168.1.255", enter "192.168.1.0" in the Dest. Network field.

Enter the subnet mask of the remote network segment in the Subnet mask field.
Enter the IP address of your router in the Gateway field. This IP address should be in the same subnet as the SonicWALL. If your router is located on the SonicWALL LAN, the Gateway address should be in the same subnet as the SonicWALL LAN IP Address.
Select the port on the SonicWALL that the router is connected to either the LAN, the WAN, or the DMZ, from the Link list.
Click Update. Once the SonicWALL has been updated, a message confirming the update is displayed at the bottom of the Web browser window. Restart the SonicWALL for the change to take effect.

Tip! The SonicWALL can support up to 128 static route entries.

To delete a static router, select the route and click Delete Route.

LAN Route Advertisement

Note! This feature is only available on the PRO 100, PRO 200, PRO 230, PRO 300, and PRO 330.

Alert! RIP Advertisements cannot be enabled in Standard mode.

The SonicWALL uses RIPv1 or RIPv2 to advertise its static and dynamic routes to other routers on the network. Changes in the status of VPN tunnels between the SonicWALL and remote VPN gateways are also reflected in the RIPv2 advertisements. Choose between RIPv1 or RIPv2 based on your router’s capabilities or configuration. RIPv1 is an earlier version of the protocol that has fewer features, and it also sends packets via broadcast instead of multicast. RIPv2 packets are backwards-compatible and can be accepted by some RIPv1 implementations that provide an option of listening for multicast packets. The RIPv2 Enabled (broadcast) selection broadcasts packets instead of multicasting packets is for heterogeneous networks with a mixture of RIPv1 and RIPv2 routers.

Tip! There is no route advertisement on the WAN.

To enable Route Advertisement on the LAN, select one of the following types of RIP Advertisements:

RIPv1 Enabled - RIPv1 is the first version of Routing Information Protocol.
RIPv2 Enabled (multicast) - to send route advertisements using multicasting (a single data packet to specific notes on the network).
RIPv2 Enabled (broadcast) - to send route advertisements using broadcasting (a single data packet to all nodes on the network).

Multicast destination IP address - sends the packet to a specific group of nodes on the network listening for the RIPv2 multicast address of 224.0.0.9.

Broadcast destination IP address - sends packets to all nodes on the network.

Advertise Static Routes - If you have static routes configured on the SonicWALL, enable this feature to exclude them from Route Advertisement.
Route Change Damp Time (seconds) - is the delay between the time a VPN tunnel changes state (up or down) and the time the change is advertised with RIP. The delay, in seconds, prevents ambiguous route advertisements sent as a result of a temporary change in a VPN tunnel status. Enter a value in seconds between advertisements broadcasted over the network in the Route Change Damp Time (seconds) field. The default value is 30 seconds. A lower value corresponds with a higher volume of broadcast traffic over the network.
Deleted Route Advertisements - enter the number of advertisements that a deleted route broadcasts until it stops in the Deleted Route Advertisements field. The default value is 5.
Route Metric (1-15) - Enter a value from 1 to 15 in the Route Metric field. This is the number of times a packet touches a router from the source IP address to the destination IP address.
RIPv2 Route Tag (4 Hex Digits) - If RIPv2 is selected from the Route Advertisements menu, you can enter a value for the Route Tag. This value is implementation-dependent and provides a mechanism for routers to classify the originators of RIPv2 advertisements. This field is optional.

RIPv2 Authentication

You can enable RIPv2 Authentication by selecting the type of authentication from the menu:

User defined - Enter 4 hex digits in the Authentication Type (4 hex digits) field. Enter 32 hex digits in the Authentication Data (32 Hex Digits) field.
Cleartext Password - Enter a password in the Authentication Password (Max 16 Chars) field. A maximum of 16 characters can be used to define a password.
MD5 Digest - Enter a numerical value from 0-255 in the Authentication Key-Id (0-255) field. Enter a 32 hex digit value for the Authentication Key (32 hex digits) field, or use the generated key.

DMZ Route Advertisement

All of the information and configuration instructions for LAN Route Advertisement apply to DMZ Route Advertisement configuration.

Help Table of Contents