When using Integrated Routing and Bridging (IRB) on a next-generation firewall in transparent mode, IPv4 routes must be configured on the BVI (Bridge Virtual Interface). The BVI acts as the routed interface for the bridged traffic, enabling Layer 3 connectivity within a transparent deployment.