This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Issue modifying Static Route

UTM Firmware version: 9.502-4

Below are several routes that I have configured in "Interfaces & Routing -> Static Routes".

I recently tried to re-route traffic to my 192.168.76.0/24 using an alternate Static Route I have configured for failover reasons.

I first switched off my static route (Gateway Route) saying 192.168.76.0/24 ->next hop->10.1.11.7

I then switched on my failover static route (Gateway Route). The UTM continued to route traffic to 10.1.11.7 even tho I had turned that static route off and turned the failover route on.

I was able to "fix" this by giving my failover route a metric of 1.

I looked in "Support -> Advanced -> Routes Table" and found these entries:

172.20.16.0/24 via 10.1.11.7 dev eth0 proto static metric 5
172.20.17.0/24 via 10.1.11.7 dev eth0 proto static metric 5
172.20.224.0/24 via 10.1.11.7 dev eth0 proto static metric 5
172.20.225.0/24 via 10.1.11.7 dev eth0 proto static metric 5
192.168.75.0/24 via 10.1.11.7 dev eth0 proto static metric 5
192.168.76.0/24 via 10.1.11.7 dev eth0 metric 5
192.168.85.0/24 via 10.1.11.7 dev eth0 proto static metric 5
192.168.86.0/24 via 10.1.11.7 dev eth0 proto static metric 5
192.168.95.0/24 via 10.1.11.7 dev eth0 proto static metric 5
192.168.96.0/24 via 10.1.11.7 dev eth0 proto static metric 5

It appears that my 192.168.76.0/24 route is not configured like the others? I looked all over the UTM trying to find another area where I might have configured something differently for this network, but I couldn't find anything.

I even tried deleting my static route but the route stays.... I cant figure out what I'm missing?

This thread was automatically locked due to age.

0 MartinDuhr over 7 years ago
UTM Firmware 9.502-4

Hello,

I exactly have the same issue as described above!

I deleted a static route in WebAdmin, and created a new one, the same network, but with different target. The deleted route still appears in the routing table of the UTM.

The only way to get it work was to decrease the metric from 5 to 2.

In the routing table i can now see 2 entries for this network:

172.17.0.0/16 via 192.168.90.2 dev eth3.104 proto static metric 2 172.17.0.0/16 via 10.100.10.1 dev eth3 metric 5

Why does the route to 10.100.10.1 still appear, althougt i've deleted it in WebAdmin??
Cancel
Vote Up 0 Vote Down

Cancel
0 MichaMayer over 7 years ago in reply to MartinDuhr

I have the same issue!

But I want to route the Network over an Site-to-Site VPN with Multipath Rules. And I can't change the metric there.

Any suggestions?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 7 years ago in reply to MichaMayer

Hi Micha - first time I've seen you post here - a belated welcome to the UTM Community!

Your question is different from those above. Please start a new thread in the VPN forum. You might call it Routing over a VPN. You will want to be specific about the configuration of the tunnel and which subnet you want to route through it.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 MichaMayer over 7 years ago in reply to BAlfson

Hi Bob,

thanks for the Reply. I don't think I have a different Problem. Just the Workaround here with the lower metric is not working for me because you cannot set a metric for multipath rules.

Anyway I open a new thread here:

https://community.sophos.com/products/unified-threat-management/f/vpn-site-to-site-and-remote-access/98156/routing-over-vpn-issue
Cancel
Vote Up 0 Vote Down

Cancel