Cisco
Login
Search
Software Secure Firewall Threat Defense
Platform Secure Firewall Threat Defense Virtual
Activity Onboard

Routing Virtual Routers Create a Virtual Router Configure a Virtual Router

Last updated: Jul 29, 2025

Configure a Virtual Router

You can assign interfaces to a user-defined virtual router and configure the routing policies for the device. Though you cannot manually add or remove interfaces for a global virtual router, you can configure the routing policies for the device interfaces.

Before you begin

  • To configure routing policies for a user-defined virtual router, add a router. See Create a Virtual Router.

  • All routing configuration settings of a non-virtual routing capable device are also available for a global virtual router. For information on the settings, see Routing Settings.

  • Only limited routing protocols are supported for a user-defined virtual router.

Procedure

1

From the Devices > Device Management page, edit the virtual-router supported device. Navigate to Routing. For information on the modifications to the routing page, see Modifications to the Firewall Management Center Web Interface - Routing Page.
2

From the drop-down list, select the desired virtual router.
3

In the Virtual Router Properties page, you can modify the description.
4

To add interfaces, select the interface under the Available Interfaces box, and then click Add.

Remember the following:

  • Only interfaces with a logical name are listed under the Available Interfaces box. You can edit the interface and provide a logical name in Interfaces. Remember to save the changes for the settings to take effect.

  • Only interfaces of global virtual routers are available for assigning; the Available Interfaces box lists only interfaces that are not assigned to any other user-defined virtual routers. You can assign physical interfaces, subinterfaces, redundant interfaces, bridge groups, VTIs, and EtherChannels to a virtual router, but not their member interfaces. Because the member interfaces cannot be named, they cannot be used in virtual routing.

    You can assign the diagnostic interface to the global virtual router only.

5

To save the settings, click Save.
6

To configure the routing policy for the virtual router, click the respective names to open the corresponding settings page:

  • OSPF—Only OSPFv2 is supported on the user-defined virtual router. All other settings for OSPFv2 are as applicable as for a non-virtual-router-aware interface, except that Interface allows you to select only the interfaces of the virtual router that you are configuring. You can define the OSPFv3 and OSPFv2 routing policies for a global virtual router. For information on the OSPF settings, see OSPF.

  • RIP—You can configure RIP routing policies only for a global virtual router. For information on RIP settings, see RIP.

  • BGP—This page displays the BGP general settings that you have configured in Settings:

    • You cannot modify any of those general settings on this page, except for the router ID settings. You can override the router ID settings that were defined in the Settings page by editing them on this page.

    • To configure other BGP IPv4 or IPv6 settings, you must enable the BGP option in BGP page under General Settings.

    • BGP configuration for both IPv4 and IPv6 address family are supported for global router and the user-defined virtual router.

    For information on configuring BGP settings, see BGP.

  • Static Route—Use this setting to define where to send traffic for a specific destination network. You can also use this setting to create an inter-virtual-router static route. You can create a leak of connected or static route by using the interfaces of user-defined or global virtual routers. FMC prefixes to an interface to indicate that it is belonging to another virtual router and can be used for a route leak. For the route leak to be successful, do not specify next hop gateway.

    The Static Route table displays the virtual router whose interface is used for a route leak in the Leaked from Virtual Router column. If it is not a route leak, the column displays N/A.

    Irrespective of which virtual router the static route belongs, a Null0 interface is listed along with the interfaces of the same virtual router to which the static route belongs.

    For information on static route settings, see Static and Default Routes.

  • Multicast—You can configure multicast routing policies only for a global virtual router. For information on multicast settings, see Multicast.
7

To save the settings, click Save.

What to do next

Previous topic Create a Virtual Router Next topic Modify a Virtual Router