Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 8077 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Static routing not working, but policy routes do

bwcms
I have an interface on my virtual UTM9 (HA pair) I use to route traffic to another device (a VMWare vShield Edge).

192.168.1.0 is behind the VSE.
192.168.185.0 is behind the UTM.
10.0.0.1 is the VSE interface ip
10.0.0.2 is the UTM interface ip

In Static Routes, I've added a Gateway route, 192.168.1.0/24, gateway 10.0.0.1.

If I try to ping 192.168.1.10 from 192.168.185.50, I get "Reply from 192.168.185.1: Destination host unreachable." 192.168.185.1 being the default gateway and UTM interface for that network.

If I add a Policy Route:
type: Gateway
source int: >
source net: 192.168.185.0
service: any
dest: 192.168.1.0
gateway: 10.0.0.1

It works fine! To me, those are the exact same route, just one being more complicated than the other.

It's more of a PITA, but I could build a bunch of policy routes. But I'm baffled as to why regular static routes wouldn't work.


This thread was automatically locked due to age.
  • 0
    So I had posted this on the Monday following the Friday I'd actually done the work. While I was reviewing the setup for this post, I started the pings again... and they worked. So now the static routes ARE working "magically." I've had this happen quite a bit on these UTM's... something doesn't work for a day and the next day, with no changes, it's working. Frustrating, but at least it's working now. I can't see how routing tables would take time to update, but on to bigger better things.

    So if you have the same issue, reboot your UTM and wait a couple days and it'll fix itself!
  • 0
    Sometimes it can help to cycle the interface that the rule applies to as well.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
Unfiltered HTML