config router policy

Configure IPv4 routing policies.

Description: Configure IPv4 routing policies.

edit <seq-num>

set input-device <name1>, <name2>, ...

set input-device-negate [enable|disable]

set src <subnet1>, <subnet2>, ...

set srcaddr <name1>, <name2>, ...

set src-negate [enable|disable]

set dst <subnet1>, <subnet2>, ...

set dstaddr <name1>, <name2>, ...

set dst-negate [enable|disable]

set action [deny|permit]

set protocol {integer}

set start-port {integer}

set end-port {integer}

set start-source-port {integer}

set end-source-port {integer}

set gateway {ipv4-address}

set output-device {string}

set tos {user}

set tos-mask {user}

set status [enable|disable]

set comments {var-string}

set internet-service-id <id1>, <id2>, ...

set internet-service-custom <name1>, <name2>, ...

end

config router policy

Parameter

Description

Type

Size

Default

input-device <name>

Incoming interface name.

Interface name.

string

Maximum length: 79

input-device-negate

Enable/disable negation of input device match.

option

disable

Option	Description
enable	Enable negation of input device match.
disable	Disable negation of input device match.

src <subnet>

Source IP and mask (x.x.x.x/x).

IP and mask.

string

Maximum length: 79

srcaddr <name>

Source address name.

Address/group name.

string

Maximum length: 79

src-negate

Enable/disable negating source address match.

option

disable

Option	Description
enable	Enable source address negation.
disable	Disable source address negation.

dst <subnet>

Destination IP and mask (x.x.x.x/x).

IP and mask.

string

Maximum length: 79

dstaddr <name>

Destination address name.

Address/group name.

string

Maximum length: 79

dst-negate

Enable/disable negating destination address match.

option

disable

Option	Description
enable	Enable destination address negation.
disable	Disable destination address negation.

action

Action of the policy route.

option

permit

Option	Description
deny	Do not search policy route table.
permit	Use this policy route for forwarding.

protocol

Protocol number .

integer

Minimum value: 0 Maximum value: 255

start-port

Start destination port number .

integer

Minimum value: 0 Maximum value: 65535

end-port

End destination port number .

integer

Minimum value: 0 Maximum value: 65535

65535

start-source-port

Start source port number .

integer

Minimum value: 0 Maximum value: 65535

end-source-port

End source port number .

integer

Minimum value: 0 Maximum value: 65535

65535

gateway

IP address of the gateway.

ipv4-address

Not Specified

0.0.0.0

output-device

Outgoing interface name.

string

Not Specified

tos

Type of service bit pattern.

user

Not Specified

tos-mask

Type of service evaluated bits.

user

Not Specified

status

Enable/disable this policy route.

option

enable

Option	Description
enable	Enable this policy route.
disable	Disable this policy route.

comments

Optional comments.

var-string

Not Specified

internet-service-id <id>

Destination Internet Service ID.

integer

Minimum value: 0 Maximum value: 4294967295

internet-service-custom <name>

Custom Destination Internet Service name.

string

Maximum length: 79

config router policy

Configure IPv4 routing policies.

config router policy

Description: Configure IPv4 routing policies.

edit <seq-num>

set input-device <name1>, <name2>, ...

set input-device-negate [enable|disable]

set src <subnet1>, <subnet2>, ...

set srcaddr <name1>, <name2>, ...

set src-negate [enable|disable]

set dst <subnet1>, <subnet2>, ...

set dstaddr <name1>, <name2>, ...

set dst-negate [enable|disable]

set action [deny|permit]

set protocol {integer}

set start-port {integer}

set end-port {integer}

set start-source-port {integer}

set end-source-port {integer}

set gateway {ipv4-address}

set output-device {string}

set tos {user}

set tos-mask {user}

set status [enable|disable]

set comments {var-string}

set internet-service-id <id1>, <id2>, ...

set internet-service-custom <name1>, <name2>, ...

end

config router policy

Parameter

Description

Type

Size

Default

input-device <name>

Incoming interface name.

Interface name.

string

Maximum length: 79

input-device-negate

Enable/disable negation of input device match.

option

disable

Option	Description
enable	Enable negation of input device match.
disable	Disable negation of input device match.

src <subnet>

Source IP and mask (x.x.x.x/x).

IP and mask.

string

Maximum length: 79

srcaddr <name>

Source address name.

Address/group name.

string

Maximum length: 79

src-negate

Enable/disable negating source address match.

option

disable

Option	Description
enable	Enable source address negation.
disable	Disable source address negation.

dst <subnet>

Destination IP and mask (x.x.x.x/x).

IP and mask.

string

Maximum length: 79

dstaddr <name>

Destination address name.

Address/group name.

string

Maximum length: 79

dst-negate

Enable/disable negating destination address match.

option

disable

Option	Description
enable	Enable destination address negation.
disable	Disable destination address negation.

action

Action of the policy route.

option

permit

Option	Description
deny	Do not search policy route table.
permit	Use this policy route for forwarding.

protocol

Protocol number .

integer

Minimum value: 0 Maximum value: 255

start-port

Start destination port number .

integer

Minimum value: 0 Maximum value: 65535

end-port

End destination port number .

integer

Minimum value: 0 Maximum value: 65535

65535

start-source-port

Start source port number .

integer

Minimum value: 0 Maximum value: 65535

end-source-port

End source port number .

integer

Minimum value: 0 Maximum value: 65535

65535

gateway

IP address of the gateway.

ipv4-address

Not Specified

0.0.0.0

output-device

Outgoing interface name.

string

Not Specified

tos

Type of service bit pattern.

user

Not Specified

tos-mask

Type of service evaluated bits.

user

Not Specified

status

Enable/disable this policy route.

option

enable

Option	Description
enable	Enable this policy route.
disable	Disable this policy route.

comments

Optional comments.

var-string

Not Specified

internet-service-id <id>

Destination Internet Service ID.

integer

Minimum value: 0 Maximum value: 4294967295

internet-service-custom <name>

Custom Destination Internet Service name.

string

Maximum length: 79

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Unified SASE

Single Vendor SASE

Cloud Network Security

Secure Endpoint Connectivity

Web Application / API Protection

Security Operations

Security Operations Automation

Identity

Early Detection & Prevention

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Communication & Surveillance

Unified SASE

Single Vendor SASE

Secure Endpoint Connectivity

Cloud Network Security

Cloud-Native Security

Web Application / API Protection

Security Operations

Security Operations Automation

Endpoint

Data Protection

Identity

Email

Early Detection & Prevention

Expert Services

Edge Firewall

Orchestration & management

SD Branch

Application Delivery

Single Vendor SASE

Secure Endpoint Connectivity

Secure Private Access

Thin Edge

Identity

Application Gateway

Enterprise Asset Management

Endpoint Agent

Agentless Security Posture

Identity

Wireless

Switching

Identity

Privilege Acccess Management

Next Generation Firewall

Orchestration & management

Expert Services

All

All

Account Management

SAAS Management

SAAS Application Security

Managed Services

Platform as a service (PAAS)

Other SAAS Services

4D Pillars

Cloud

Popular Solutions

CLI Reference

config router policy

config router policy

config router policy

config router policy

config router policy

config router policy