Forcepoint™ Security Management Center Service Online Documentation

Home
Routing
Advanced routing topics

Preface
This guide provides the information you need to work with your Forcepoint product.
Introduction to SMC as a Service
The SMC as a Service provides centralized access for configuring, managing, logging, and monitoring NGFWs that secure network connectivity and control business operations.
Getting Started
Routing
- Configuring routing and anti-spoofing
  Routing defines through which next hop router the Engine forwards traffic from a source address to a destination address. Anti-spoofing defines which addresses are considered valid source addresses for the networks connected to each interface.
- Outbound traffic management
  You can use Multi-Link to distribute outbound traffic between multiple network connections and to provide high availability and load balancing for outbound traffic.
- Inbound traffic management
  Inbound traffic management ensures that services remain available even when one or more servers or NetLinks fail, and balances the load of incoming traffic more efficiently between a group of servers. Inbound traffic management is not supported on layer 2 physical interfaces on Engines.
- Dynamic link selection
  When you use Multi-Link for outbound traffic management or Multi-Link VPNs, SMCaaS can dynamically select the NetLink or VPN link that best matches the quality requirements of traffic.
- Advanced routing topics
  - Using metrics or ECMP on multiple routes to the same destination
    You can configure multiple routes through different next hop gateways to the same destination.
  - Configure Forced Next Hop routing
    The Forced Next Hop option can be used to force forward traffic to a specific tunnel, or next hop IP address overriding normal routing.
  - Configure policy routing
    Policy routing allows you to route traffic based on both source and destination IP address. Policy routing is useful when you want to configure a different route for a destination based on the source address.
  - Configuring multicast routing
    The Engine supports static multicast, IGMP-based multicast forwarding (IGMP proxying), and multicast routing using protocol-independent multicast (PIM). You can also configure dynamic multicast routing using the Free Range Routing (FRR) Suite on the command line.
  - Configuring dynamic routing
    With dynamic routing, Engines automatically change their routing when the network topology changes. The Engines can also exchange information about appropriate routing paths.
Policy Creation and Administration
Monitoring
VPN

Advanced routing topics

Using metrics or ECMP on multiple routes to the same destination
You can configure multiple routes through different next hop gateways to the same destination.
Configure Forced Next Hop routing
The Forced Next Hop option can be used to force forward traffic to a specific tunnel, or next hop IP address overriding normal routing.
Configure policy routing
Policy routing allows you to route traffic based on both source and destination IP address. Policy routing is useful when you want to configure a different route for a destination based on the source address.
Configuring multicast routing
The Engine supports static multicast, IGMP-based multicast forwarding (IGMP proxying), and multicast routing using protocol-independent multicast (PIM). You can also configure dynamic multicast routing using the Free Range Routing (FRR) Suite on the command line.
Configuring dynamic routing
With dynamic routing, Engines automatically change their routing when the network topology changes. The Engines can also exchange information about appropriate routing paths.