ShieldGate Docs

Network firewall

Addresses and routing

Interface addresses, static routes, and ECMP groups.

Goal

Assign L3 addresses and steer traffic with static routes and optional ECMP.

Prerequisites

  • Interfaces (and preferably zones) from Zones and L2.
  • network.write.

Steps

  1. Open Network → L3.
  2. Add an address: interface name + CIDR (mark primary when appropriate).
  3. Add a static route: destination CIDR, next hop and/or outgoing interface, metric, table id.
  4. Optionally create an ECMP group, then attach routes to that group id.
  5. Publish so appliances install addresses and FIB entries.

Tips

  • Match interface names exactly to L2 interface names.
  • Prefer small metric changes over deleting default routes during live cutovers.
  • ECMP is MVP config: appliances apply equal-cost multipath when the datapath supports it.

Verify

  • Addresses list under L3 for the intended interface.
  • A test destination matches the expected next hop after publish (Linux) or appears in Mock apply state.