- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
How can I configure static routes in SonicOS?
10/14/2021 
3,070 People found this article helpful
154,340 Views
Description
How to Configure Static Routes in SonicOS Enhanced
Resolution
Video Tutorial: Click here for the video tutorial of this topic.
If you have routers on your interfaces and if you want to access the computers attached to the router, you need to configure static routes on the SonicWall security appliance on the Network | Routing page. The static route policies will create static routing entries that make decisions based upon source address, source netmask, destination address, destination netmask, service, interface, gateway and metric.
In the above example: a NAT-enabled SonicWall UTM appliance is configured with a LAN IP of 192.168.168.168 / 255.255.255.0 and the computers on the LAN network are on the similar IP range. The IP address of the local router is 192.168.168.254 /24 with the Gateway IP as 192.168.168.168, which connects to another network numbered 10.10.20.x
Configuring Static Routes on SonicOS Enhanced
Resolution for SonicOS 7.X
This release includes significant user interface changes and many new features that are different from the SonicOS 6.5 and earlier firmware. The below resolution is for customers using SonicOS 7.X firmware.
- Navigate to Policy | Rules and Policies | Routing Rules.
- Click Add at the bottom of the screen.
Select the following route policy settings:
Under Lookup tab:- Source = Any.
- Under Destination = Click on EDIT button | New Address Object.
- Enter a name for the address object.
- Specify the Zone Assignment as LAN.
- Specify the Type as Network.
- Specify the IP Address 10.10.20.0.
- Specify the Netmask 255.255.255.0.
- Click OK.
- Service = Any.
Under NextHop:- Interface=X0.
- Under Gateway= Click on EDIT button | New Address Object.
- Enter a name for the address object.
- Specify the Zone Assignment as LAN.
- Specify the Type as Host.
- Specify the IP Address 192.168.168.254.
- Metric=1
- Click Save.
Resolution for SonicOS 6.5
This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.
- Login to the SonicWall management Interface.
- Click Manage in the top navigation menu.
- Click Network | Routing | Route Policies and click add button.
3. Select the following route policy settings:
- Source = Any.
- Under Destination = specify Create New Address Object.
- Enter a name for the static route.
- Specify the Zone Assignment as LAN.
- Specify the Type as Network.
- Specify the IP Address 10.10.20.0.
- Specify the Netmask 255.255.255.0.
- Click OK.
- Service = Any.
- Under Gateway = specify Create New Address Object.
- Enter a name for the local router.
- Specify the Zone Assignment as LAN.
- Specify the Type as Host.
- Specify the IP Address 192.168.168.254. (i.e Route IP on X0).
- Click OK.
- Specify the interface as LAN.
- Specify the metric as 1.
- Click OK.
NOTE: The destination network and mask must define a logical subnet which doesn't overlap the LAN subnet. The gateway must be local to the LAN.
NOTE: The router at 192.168.168.254 must have a default route pointing to the firewall's LAN IP address (192.168.168.168) for the secondary subnet to be able to access the Internet through the SonicWall's connection.
TIP: You can also establish static routes for the WAN, DMZ and additional interfaces as applicable, but only if the gateway router involved is a second router, not the main WAN Gateway router, for which you will not need static routes.
Related Articles
- Configuring and troubleshooting SonicWALL Switches
- How can I get alerted if a WAN link goes down in a WAN fail-over scenario?
- Configuring and troubleshooting High Availability
Categories
- Firewalls > SonicWall SuperMassive 9000 Series > Networking
- Firewalls > TZ Series > Networking
- Firewalls > NSa Series > Networking
- Firewalls > NSv Series > Networking
YES
NO