Add static route on Firepower module

[Dinesh Verma]

When we add static route from Sourcefire CLI, chances are they may disappear when we reboot the SFR module. There is another way, we can add static routes permanently.

Steps to Add Static Routes:

Step 1: Login to the Command Line Interface (CLI) of the appliance.

Step 2: Access the network-device directory as root user.

--> sudo su – (become root)

--> cd /etc/sysconfig/network-devices

Step 3: Execute the following command to create the necessary configuration file:

touch ifcfg-static-routes ( in case ifcfg-static-routes is missing inside network-devices directory)

Step 4: Execute the following command to add a static route:

echo '<device> <type> <network> <subnet_prefix> <gateway>'

>> /etc/sysconfig/network-devices/ifcfg-static-routes

Step 5: Execute the following command to load the new static routes:

/etc/rc.d/init.d/routes restart

-------------------------------------------------------------------------------------------------------

Eg: echo 'eth0 ipv4 10.10.10.0 255.255.255.0 10.10.10.1’ >> /etc/sysconfig/network-devices/ifcfg-static-routes

[Sunil Kumar]

The alternate way to add the static route. 

configure network static-routes ipv4 add <interface> <destination> <netmask> <gateway>

Example:

configure network static-routes ipv4 add eth0 192.168.10.0 255.255.255.0 192.168.1.1

Regards, 

Sunil Kumar

[Hindin O]

I have still the same problem. Every time when I rebbot the ASA my static routes from the SFR module are gone. I use the statement: configure network static-routes ipv4 add eth0 

Is there a solution available? 

[John Telford]

@Dinesh Verma Thanks - this resolves the issue to keep static routes persistent across reboots. The alternate CLI method still does not. Surprised that in 2018 on 5555-X with Firepower release 6.2.0.2 we still have to go into the shell to make static routes persistent. Regards