Using the command line to configure dynamic routing

You can enter dynamic routing commands through the vtysh shell of the Free Range Routing (FRR) suite on the command line of the Secure SD-WAN Engine.

Important: If you make changes to dynamic routing using the Management Client, all changes that you made on the command line are overwritten.

Dynamic routing is supported on Single Engines, Engine Clusters, and Virtual Engines.

For Virtual Engines, you must enter the following command on the Master Engine to access the command line of the Virtual Engine:

se-virtual-engine

Engine Clusters or Master Engines automatically synchronize the FRR configuration files between nodes, and the routing daemon is automatically stopped and started. Edit the FRR configuration on the node that is currently active for dynamic routing. To check that you are working on the correct node, enter the following command:

sg-dynamic-routing status

The output must include the following string:

FRR suite status (node is Active)

Detailed instructions for configuring the FRR suite can be found on the FRR Software Routing Suite website at https://⁠docs.frrouting.org/en/latest/.

Note: Configuring dynamic routing requires SSH access to the command line. We recommend that you disable SSH access whenever it is not needed. Make sure that your Access rules allow SSH access to the Secure SD-WAN Engines from the administrators’ IP addresses only.