ScreenOS Cookbook
by Stefan Brunner, Vik Davar, David Delcourt, Ken Draper, Joe Kelly, Sunil Wadhwa
Chapter 4. Route Mode and Static Routing
4.0. Introduction
Routing is the most important factor for traffic to flow over the network. Every packet traveling from Host A to Host B needs to have a defined path; otherwise, communication over the network is impossible. The defined path can be a default route, or it can be specific routes for an IP address. The paths can be configured manually using static routing, or they can be established using dynamic methods with the help of routing protocols, such as the Open Shortest Path First (OSPF) protocol, the Border Gateway Protocol (BGP), and the Routing Information Protocol (RIP).
Each path is considered to be a route and has the following elements:
- Prefix
The IP address and mask. This is the IP address for which the route is defined.
- Next hop
The gateway IP address, and the interface or Virtual Router (VR). This is where the packet should be forwarded for the IP address.
- Preferences
The priority for the route.
- Metric
The cost associated with the route.
- Tag
Used to identify the route for filtering or redistribution into other instances.
The collection of all paths is kept in a database called the routing table.
In ScreenOS software, you can deploy a firewall in three different system modes: Network Address Translation (NAT) mode, route mode, and transparent mode. The routing table is used differently in each mode. When the device is in transparent mode, the device utilizes the Media Access Control (MAC) table to forward packets; while in NAT/route ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access