hello,
i was reading through the release notes of the latest firmware before I apply it to our FW's and this particular known issue has me scratching my head
| NC-42364 | Networking (deprecated) | IPsec route precedence isn't applied.
When system route_precedence is configured to give VPN routes higher priority than static routes, the firewall doesn't send the traffic through the IPsec tunnel. Instead, it routes the traffic through a matching static route. This occurs if a static or local route exists directing the traffic to a non-WAN zone. The route precedence command only applies to traffic destined for the WAN zone. |
Manually create an IPsec route for the remote subnet.
Example: console> system ipsec_route add net 192.168.1.0/255.255.255.0 tunnelname <tunnelname> Then press Tab twice to see the list of available tunnels. |
wouldn't it be easier to just change the SD-WAN route precedence to have static routes have a higher priority than VPN routes or am I overthinking it? we do have static routes set on the FW that point to LAN so this may cause us to hold off on applying this update until this resolved
This thread was automatically locked due to age.
