add-route
The add-route option is now available for all dynamic IPsec phase 1s and phase 2s, for both policy-based and route-base IPsec VPNs. This allows you to control the addition of a route to a peer destination selector.
This option was previously only available when mode-cfg was enabled in phase 1. Also, in phase 2, a new option has been added allowing add-route to automatically match the settings in phase 1.
This feature is enabled by default.
Syntax
1. Configuring phase 1:
config vpn ipsec {phase1 | phase1-interface}
edit <name>
set type dynamic
set add-route {enable | disable}
end
end
2. Configuring phase 2:
config vpn ipsec {phase2 | phase2-interface}
edit <name>
set add-route {phase1 | enable | disable}
end
end