Adding routes for Master Engines and Virtual Engines

The need to configure routing can change depending on the role of the Engine and the types of interfaces that have been configured.

Basic routing information for networks directly connected to Master Engines and Virtual Engines is added automatically to both routing and anti-spoofing based on the IP addresses that you have defined for the interfaces. You must add a default route and any routes through next-hop gateways to networks that are not directly connected to the Master Engine or Virtual Engine.

On Master Engines, routing and anti-spoofing can only be configured for the Master Engine’s system communications interfaces. No routes have to be defined if a Master Engine communicates only in its local IP network.

On Master Engines that host Virtual Engines, you can only add routes to interfaces that have IP addresses. Routing and anti-spoofing for Virtual Engines are configured in the same way as for Single Engines.

To transfer changes to the routing or anti-spoofing for a Master Engine, you must refresh the policy on the Master Engine. To transfer changes to the routing or anti-spoofing for a Virtual Engine, you must refresh the policy on the Virtual Engine.