Using the command line to configure dynamic routing
You can enter dynamic routing commands through the vtysh shell of the Quagga suite on the command line of the NGFW Engine.
Important: If you make changes to dynamic routing using the Management Client, all changes that you made on the command line are
overwritten.
Dynamic routing is supported on Single Firewalls, Firewall Clusters, and Virtual Firewalls.
For Virtual Firewalls, you must enter the following command on the Master NGFW Engine to access the command line of the Virtual
Firewall:
se-virtual-engine
Firewall Clusters or Master NGFW Engines automatically synchronize the Quagga configuration files between nodes, and the routing daemon is
automatically stopped and started. Edit the Quagga configuration on the node that is currently active for dynamic routing. To check that you are working on the correct node, enter the
following command:
sg-dynamic-routing status
The output must include the following string:
Quagga suite status (node is Active)
Detailed instructions for configuring the Quagga suite can be found on the Quagga Software Routing Suite website at http://www.nongnu.org/quagga/docs.html.
Note: Configuring dynamic routing requires SSH access to the command line. We recommend that you disable SSH access whenever it is not needed. Make sure that your Access rules allow SSH access
to the NGFW Engines from the administrators’ IP addresses only.