diff --git a/de/heat-templates/fragments/NetworkAccVM.yaml b/de/heat-templates/fragments/NetworkAccVM.yaml
index 751f40f..9cd2c77 100644
--- a/de/heat-templates/fragments/NetworkAccVM.yaml
+++ b/de/heat-templates/fragments/NetworkAccVM.yaml
@@ -11,6 +11,20 @@
   control_network_host_routes:
     type: json
     default: []
+  tungstenfabric_enabled:
+    type: boolean
+  control_network_vsrx_peering_ip:
+    type: string
+    default: ''
+  private_floating_network_cidr:
+    type: string
+    default: ''
+
+conditions:
+  cond_extra_routes:
+    equals:
+      - get_param: tungstenfabric_enabled
+      - true
 
 resources:
 
@@ -34,6 +48,13 @@
     properties:
       router: { get_resource: router }
       subnet: { get_resource: subnet }
+  extra_routes:
+    type: OS::Neutron::ExtraRoute
+    condition: cond_extra_routes
+    properties:
+      destination: { get_param: private_floating_network_cidr }
+      nexthop: { get_param: control_network_vsrx_peering_ip }
+      router_id: { get_resource: router }
 
 
 outputs:
diff --git a/de/heat-templates/top.yaml b/de/heat-templates/top.yaml
index c5688b8..d3bab41 100644
--- a/de/heat-templates/top.yaml
+++ b/de/heat-templates/top.yaml
@@ -357,6 +357,9 @@
       control_network_cidr: { get_param: control_network_cidr }
       dns_nameservers: { get_param: dns_nameservers }
       control_network_host_routes: { get_param: control_network_host_routes }
+      tungstenfabric_enabled: { get_param: tungstenfabric_enabled }
+      control_network_vsrx_peering_ip: { get_param: control_network_vsrx_peering_ip }
+      private_floating_network_cidr: { get_param: private_floating_network_cidr }
 
   tun_network:
     type: MCP2::NetworkTun