It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

This Firmware Version Is End-Of-Support

Documentation for this product is no longer updated. Please see End-of-Support for CloudGen Firewall Firmware for further information on our EoS policy.

How to Configure Gateway Routes

  • Last updated on

Gateway routes are defined for all networks that are not directly attached to a port of the Barracuda CloudGen Firewall. The CloudGen Firewall forwards all traffic with the configured destination to the gateway (next hop) IP address specified in the gateway route. For example, the default route (, which routes all traffic to the ISP gateway IP address, is a gateway route.


Step 1. Configure a Gateway Route

  1. Go to CONFIGURATION > Configuration Tree  > Box > Network.
  2. In the left menu, click Advanced Routing.
  3. Click Lock.
  4. In the IPv4 Routing Table section, click + to add a gateway route:
    • Name – Enter a name.
    • Target Network Address – Enter the network in CIDR format. E.g., for the default route
    • Route Type – Select gateway.
    • Gateway – The gateway IP address. E.g.,
    • Trust Level – Select the trust level. Use Untrusted for WAN connections.
    • (optional) Advertise Route – To propagate this network route via the dynamic routing service, select Yes. For more information, see Dynamic Routing Protocols (OSPF/RIP/BGP).
  5. Click OK.
  6. Click Send Changes and Activate.

Step 2. Activate the Network Configuration

After you have configured the network route, you must activate your new network configuration.

  1. Go to CONTROL > Box.
  2. In the left menu, expand Network and click Activate new network configuration.
  3. Select Failsafe. The "Failsafe Activation Succeeded" message is displayed after your new network configurations have been successfully activated.

The gateway route is now active on the CONTROL > Network page. If the remote gateway no longer answers ARP request, the route is placed in a pending state until the gateway is reachable again.