diff --git a/helpers/bitmask-root b/helpers/bitmask-root
index 054613a6889123e066ce2e5b5db839f664e74736..6615d3b74106b836983e2549ea0c0feb4b074adc 100644
--- a/helpers/bitmask-root
+++ b/helpers/bitmask-root
@@ -144,6 +144,7 @@ ALLOWED_FLAGS = {
     "--auth": ["CIPHER"],
     "--management": ["DIR||IP", "UNIXSOCKET||NUMBER"],
     "--management-client-user": ["USER"],
+    "--route": ["IP", "IP", "NETGW"],
     "--cert": ["FILE"],
     "--key": ["FILE"],
     "--ca": ["FILE"],
@@ -164,6 +165,7 @@ PARAM_FORMATS = {
     "FILE": lambda s: os.path.isfile(s),
     "DIR": lambda s: os.path.isdir(os.path.split(s)[0]),
     "UNIXSOCKET": lambda s: s == "unix",
+    "NETGW": lambda s: s == "net_gateway",
     "UID": lambda s: re.match("^[a-zA-Z0-9]+$", s)
 }