Creating a blackhole route

A static route is used to blackhole any headquarter traffic from egressing an underlay interface if both VPN tunnels are down.

Starting with the static route, create the blackhole route to prevent corporate traffic leaks.

To create a blackhole route:

1. Go to Network > Static routes, and click Create New > IPv4 Static Route.
2. Set Destination to Subnet, and enter summary of your corporate LAN, which should include the branch LANs.

   The following example uses 10.0.0.0/8.

   

3. Set Interface to Blackhole.
4. Click OK.