VPN Mode Configuration Commands
251
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
vpn sslvpn route add
This command configures a static client route to a destination network. After you have issued
the vpn sslvpn route add command, you enter the vpn-config [sslvpn-route-settings]
mode, and then you can configure one keyword and associated parameter or associated
keyword at a time in the order that you prefer.
Note: When full-tunnel support is enabled, client routes are not operable.
For clients routes to be operable, split-tunnel support should be
enabled.
Command example:
SRX5308>
vpn sslvpn route add
vpn-config[sslvpn-route-settings]>
ip_version IPv4
vpn-config[sslvpn-route-settings]>
destination_network 192.168.4.20
vpn-config[sslvpn-route-settings]>
subnet_mask 255.255.255.254
vpn-config[sslvpn-route-settings]>
save
Step 1 Format vpn sslvpn route add
Mode vpn
Step 2 Format ip_version {IPv4 {destination_network <ipaddress>} {subnet_mask
<subnet mask>} | IPv6 {destination_network6 <ipv6-address>}
{prefix_length <prefix length>}}
Mode vpn-config [sslvpn-route-settings]
Keyword Associated
Parameter to Type
Description
ip_version IPv4 or IPv6 Specifies the IP version of the destination network for the
route:
• IPv4. The network address is an IPv4 address. You need to
issue the destination_network and subnet_mask
keywords and specify an IPv4 address and subnet mask.
• IPv6. The network address is an IPv6 address. You need to
issue the destination_network6 and prefix_length
keywords and specify an IPv6 address and prefix length.
destination_network ipaddress If the ip_version keyword is set to IPv4, the IPv4 address
of the destination network for the route.
subnet_mask subnet mask If the ip_version keyword is set to IPv4, the subnet mask
of the destination network for the route.
destination_network6 ipv6-address If the ip_version keyword is set to IPv6, the IPv6 address
of the destination network for the route.
prefix_length prefix length If the ip_version keyword is set to IPv6, the prefix length
of the destination network for the route.