topic Management interface routing in General Topics

Management interface routing

MikeSangray2019 — Mon, 12 Jul 2021 18:55:00 GMT

I'm working on isolating the management interface onto its own network. The firewall will be the router for this traffic and the network switch it connects to will be L2 only. If my management IP is 10.10.20.10/24 and the gateway is 10.10.20.1 where do I configure the gateway address 10.10.20.1 on the firewall? Is this created as part of the management interface routing table automatically? Or do I need to create it somewhere else?

Re: Management interface routing

OtakarKlier — Mon, 12 Jul 2021 19:52:29 GMT

Hello,

The way I prefer to create this is to use a trunk from the switch to the firewall (layer2) and then use a vlan interface as the layer3 gateway. The trunk allows for future flexibility (e.g. allowing additional vlans over the same wire). You will also need to add a static route in the virtual router so the PAN knows where to send the traffic, i.e. destination 10.10.20.0/24 interface vlan (MGMT), next hop = none.

Hope that helps.

Re: Management interface routing

MikeSangray2019 — Mon, 12 Jul 2021 21:51:56 GMT

Can I use a sub-interface for service routes as well?