Configuring IPv4 Static Routes in Gaia Clish

To add or configure a default static IPv4 route

set static-route default

      comment {"Text" | off}

      nexthop

            gateway

                  address <IPv4 Address of Next Hop Gateway> [priority <Priority>] {on | off}

                  logical <Name of Local Interface> [priority <Priority>] {on | off}

            blackhole

            reject

      ping {on | off}

      rank <Rank>

      scopelocal {on | off}

To add or configure a specific static IPv4 route

set static-route <Destination IPv4 Address>

      comment {"Text" | off}

      nexthop

            gateway

                  address <IPv4 Address of Next Hop Gateway>

                        {on | off}

                        [priority <Priority>]

                  logical <Name of Local Interface>

                        {on | off}

                        [priority <Priority>]

            blackhole

            reject

off

      ping {on | off}

      rank <Rank>

      scopelocal {on | off}

To show all configured static IPv4 routes

show route static all

To remove a default static IPv4 route

set static-route default off

To remove a specific static IPv4 route

set static-route <Destination IPv4 Address> off

To remove a specific path only, when multiple next hop gateways are configured

set static-route <Destination IPv4 Address> nexthop gateway <IPv4 Address of Next Hop Gateway> off

set static-route <Destination IPv4 Address> nexthop gateway <Name of Local Interface> off

CLI Parameters

Parameter

Description

default

Defines the default static IPv4 route.

<Destination IPv4 Address>

Specifies the IPv4 address of destination host or network using the CIDR notation (IPv4 Address / Mask Length).

Example: 192.168.2.0/24

You can use the default keyword instead of an IPv4 address when referring to the default route.

comment {"Text" | off}

Defines of removes the optional comment for the static route.

Write the text in double quotes.
Text must be up to 100 characters.
This comment appears in the Gaia Portal Web interface for the Check Point Gaia operating system. and in the output of the "show configuration" command.

nexthop

Defines the next hop path, which can be a gateway, blackhole, or reject.

gateway

Specifies that this next hop accepts and sends packets to the specified destination.

blackhole

Specifies that this next hop drops packets, but does not send ICMP unreachable packet to the traffic source.

reject

Specifies that this next hop drops packets and sends ICMP unreachable packet to the traffic source.

address <IPv4 Address of Next Hop Gateway>

Specifies the IPv4 address of the next hop gateway.

logical <Name of Local Interface>

Identifies the next hop gateway by the name of the local interface that connects to it.

Use this option only if the next hop gateway has an unnumbered interface.

priority <Priority>

Defines which gateway to select as the next hop when multiple gateways are configured.

The lower the priority, the higher the preference - priority 1 means the highest preference, and priority 8 means the lowest preference.

You can define two or more paths with the same priority to specify a backup path with equal priority.

Gateways with no priority configured are preferred over gateways with priority configured.

nexthop ... on

Adds the specified next hop gateway.

nexthop ... off

Deletes the specified next hop gateway.

If you specify a next hop gateway, only the specified path is deleted.

If you do not specify a next hop gateway, the route and all related paths are deleted.

off

Removes the static route.

ping {on | off}

Enables (on) or disables (off) the ping of specified next hop gateways for IPv4 static routes.

The Ping feature sends ICMP Echo Requests to verify that the next hop gateway for a static route is working. Only next hop gateways, which are verified as working are included in the kernel forwarding table.

When Ping is enabled, an IPv4 static route is added to the kernel forwarding table only after at least one next hop gateway is reachable.

To configure the ping behavior, run:

set ping count <value>

set ping interval <value>

rank <Rank>

Selects a route, if there are many routes to a destination that use different routing protocols.

The route with the lowest rank value is selected.

Use the rank keyword in place of the nexthop keyword with no other parameters.

Accepted values are: default (60), integer numbers from 0 to 255.

In addition, see this command: "set protocol-rank protocol <Rank>"

scopelocal {on | off}

Defines a static route with a link-local scope.

Use this setting on a Cluster Member Security Gateway that is part of a cluster., when the ClusterXL Virtual IPv4 address is in a different subnet than the IPv4 address of a physical interface.

This lets the Cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. Member accept static routes on the subnet of the Cluster Virtual IPv4 address.

To make sure that the scopelocal attribute is set correctly, run the "cat /etc/routed.conf" command.
For more information, see sk92799.

Example

[Global] MyChassis-ch01-01 > set static-route 192.0.2.0/24 nexthop gateway address 192.0.2.155 on
 
[Global] MyChassis-ch01-01 > set static-route 192.0.2.0/24 nexthop gateway address 192.0.2.155 off
 
[Global] MyChassis-ch01-01 > set static-route 192.0.2.0/24 nexthop gateway logical eth0 on
 
[Global] MyChassis-ch01-01 > set static-route 192.0.2.0/24 off
 
[Global] MyChassis-ch01-01 > set static-route 192.0.2.100/32 nexthop blackhole
 
[Global] MyChassis-ch01-01 > set static-route 192.0.2.100/32 rank 2
 
[Global] MyChassis-ch01-01 > show route static
  Codes: C - Connected, S - Static, R - RIP, B - BGP,
       O - OSPF IntraArea (IA - InterArea, E - External, N - NSSA)
       A - Aggregate, K - Kernel Remnant, H - Hidden, P - Suppressed
 
S 0.0.0.0/0 via 192.168.3.1, eth0, cost 0, age 164115
S 192.0.2.100 is a blackhole route
S 192.0.2.240 is a reject route
[Global] MyChassis-ch01-01 >