Static Routing

You add network tunnel groups to Secure Access to enable secure network connections to the internet and private resources. When setting up a network tunnel group, you can choose static routing or dynamic routing (when you have a BGP peer for your on-premise router).

Use static routing for small, simple networks where predictable routes are needed and manual configuration is manageable. You might want to use static routes in the following cases:

  • Your networks use an unsupported router discovery protocol.
  • Your network is small and you can easily manage static routes.
  • You do not want the traffic or CPU overhead associated with routing protocols.
  • In some cases, a default route is not enough. The default gateway might not be able to reach the destination network, so you must also configure more specific static routes. For example, if the default gateway is outside, then the default route cannot direct traffic to any inside networks that are not directly connected to the network device.
  • You are using a feature that does not support dynamic routing protocols.
  • Note that advertising a default route using static routing is not supported and can lead to traffic disruptions.

Routing Options and Guidelines < Static Routing > Dynamic Routing Using BGP