Forcepoint™ Security Management Center Service Online Documentation

Home
Routing
Advanced routing topics
Configuring dynamic routing
With dynamic routing, Engines automatically change their routing when the network topology changes. The Engines can also exchange information about appropriate routing paths.
Creating elements for dynamic routing
Before enabling dynamic routing in the SMCaaS Application, you can optionally create customized elements for dynamic routing.
Create Route Map elements
Use Route Map elements in more complex networks to control or manipulate routes. You can use Access List elements as a Matching Condition in a Route Map rule.
Route Map Add Extended Community Number dialog box
Use this dialog box to enter the extended community number.

Preface
This guide provides the information you need to work with your Forcepoint product.
Introduction to SMC as a Service
The SMC as a Service provides centralized access for configuring, managing, logging, and monitoring NGFWs that secure network connectivity and control business operations.
Getting Started
Routing
- Configuring routing and anti-spoofing
  Routing defines through which next hop router the Engine forwards traffic from a source address to a destination address. Anti-spoofing defines which addresses are considered valid source addresses for the networks connected to each interface.
- Outbound traffic management
  You can use Multi-Link to distribute outbound traffic between multiple network connections and to provide high availability and load balancing for outbound traffic.
- Inbound traffic management
  Inbound traffic management ensures that services remain available even when one or more servers or NetLinks fail, and balances the load of incoming traffic more efficiently between a group of servers. Inbound traffic management is not supported on layer 2 physical interfaces on Engines.
- Dynamic link selection
  When you use Multi-Link for outbound traffic management or Multi-Link VPNs, SMCaaS can dynamically select the NetLink or VPN link that best matches the quality requirements of traffic.
- Advanced routing topics
  - Using metrics or ECMP on multiple routes to the same destination
    You can configure multiple routes through different next hop gateways to the same destination.
  - Configure Forced Next Hop routing
    The Forced Next Hop option can be used to force forward traffic to a specific tunnel, or next hop IP address overriding normal routing.
  - Configure policy routing
    Policy routing allows you to route traffic based on both source and destination IP address. Policy routing is useful when you want to configure a different route for a destination based on the source address.
  - Configuring multicast routing
    The Engine supports static multicast, IGMP-based multicast forwarding (IGMP proxying), and multicast routing using protocol-independent multicast (PIM). You can also configure dynamic multicast routing using the Free Range Routing (FRR) Suite on the command line.
  - Configuring dynamic routing
    With dynamic routing, Engines automatically change their routing when the network topology changes. The Engines can also exchange information about appropriate routing paths.
    - Getting started with dynamic routing
      You can configure dynamic routing in the SMCaaS Application or on the command line of the Engine.
    - Dynamic routing configuration overview
      The steps for configuring dynamic routing depend on the protocol you use and whether you configure it in the SMCaaS Application or on the Engine command line.
    - Creating elements for dynamic routing
      Before enabling dynamic routing in the SMCaaS Application, you can optionally create customized elements for dynamic routing.
      - Create core elements for dynamic routing
        Create the elements that contain dynamic routing configuration information. The elements can be used in multiple Engines, Virtual Engines, and Engine Clusters.
      - Create Access List elements
        You can use Access List elements as a Matching Condition in a Route Map element. You can also use certain Access Lists in BGP Peering elements.
      - Create Route Map elements
        Use Route Map elements in more complex networks to control or manipulate routes. You can use Access List elements as a Matching Condition in a Route Map rule.
        
        Route Map Properties dialog box
        Use this dialog box to create your Route Map.
        
        Route Map Policy Editing view
        Use this view to add rules to your Route Map.
        
        Route Map Matching Conditions dialog box
        Use this dialog box to define the conditions to match in a rule in a Route Map.
        
        Route Map Route Entry Settings dialog box
        Use this dialog box to define Route Entry Settings in a Route Map.
        
        Route Map Route Entry Settings Add AS Number dialog box
        Use this dialog box to define the AS number to prepend or exclude from the AS path.
        
        Route Map Add Community Number dialog box
        Use this dialog box to select the community or to enter the community number.
        
        Route Map Add Extended Community Number dialog box
        Use this dialog box to enter the extended community number.
        
        Route Map Call dialog box
        Use this dialog box to call another Route Map.
        
        Route Map Goto Properties dialog box
        Use this dialog box to set what actions to take after processing the rule.
    - Configure BGP
      You can configure dynamic routing using the BGP protocol on Engines, Virtual Engines, and Engine Clusters.
    - Configure OSPFv2
      You can configure dynamic routing using the OSPFv2 protocol on Engines, Virtual Engines, and Engine Clusters.
    - Configure PIM
      You can configure dynamic multicast routing using a variant of the PIM protocol on Engines, Virtual Engines, and Engine Clusters.
    - Preview the dynamic routing configuration in FRR syntax
      To make sure the dynamic routing configuration done in the SMCaaS Application is what you intended, preview the configuration in Free Range Routing (FRR) syntax.
    - Using the command line to configure dynamic routing
      You can enter dynamic routing commands through the vtysh shell of the Free Range Routing (FRR) suite on the command line of the Engine.
    - Restart dynamic routing processing
      If routes are not being updated as expected, you can restart the dynamic routing processing.
Policy Creation and Administration
Monitoring
VPN

Route Map Add Extended Community Number dialog box

Use this dialog box to enter the extended community number.

Option	Definition
Extended Community Number	Enter the extended community number.

Copyright © 2026 Forcepoint LLC