Chapter 15 Policy and Static Routes
ZyWALL USG 300 User’s Guide
381
Policy Routes Versus Static Routes
• Policy routes are more flexible than static routes. You can select more criteria
for the traffic to match and can also use schedules, NAT, and bandwidth
management.
• Policy routes are only used within the ZyWALL itself. Static routes can be
propagated to other routers using RIP or OSPF.
• Policy routes take priority over static routes. If you need to use a routing policy
on the ZyWALL and propagate it to other routers, you could configure a policy
route and an equivalent static route.
DiffServ
QoS is used to prioritize source-to-destination traffic flows. All packets in the same
flow are given the same priority. CoS (class of service) is a way of managing traffic
in a network by grouping similar types of traffic together and treating each type as
a class. You can use CoS to give different priorities to different packet types.
DiffServ (Differentiated Services) is a class of service (CoS) model that marks
packets so that they receive specific per-hop treatment at DiffServ-compliant
network devices along the route based on the application types and traffic flow.
Packets are marked with DiffServ Code Points (DSCPs) indicating the level of
service desired. This allows the intermediary DiffServ-compliant network devices
to handle the packets differently depending on the code points without the need to
negotiate paths or remember state information for every flow. In addition,
applications do not have to request a particular service or give advanced notice of
where the traffic is going.
DSCP Marking and Per-Hop Behavior
DiffServ defines a new DS (Differentiated Services) field to replace the Type of
Service (TOS) field in the IP header. The DS field contains a 2-bit unused field and
a 6-bit DSCP field which can define up to 64 service levels. The following figure
illustrates the DS field.
DSCP is backward compatible with the three precedence bits in the ToS octet so
that non-DiffServ compliant, ToS-enabled network device will not conflict with the
DSCP mapping.
The DSCP value determines the forwarding behavior, the PHB (Per-Hop Behavior),
that each packet gets across the DiffServ network. Based on the marking rule,
different kinds of traffic can be marked for different kinds of forwarding. Resources
can then be allocated according to the DSCP values and the configured policies.
DSCP (6 bits)
Unused (2 bits)
Summary of Contents for USG-300 - V2.20 ED 2
Page 2: ......
Page 30: ...Table of Contents ZyWALL USG 300 User s Guide 30 ...
Page 31: ...31 PART I User s Guide ...
Page 32: ...32 ...
Page 38: ...Chapter 1 Introducing the ZyWALL ZyWALL USG 300 User s Guide 38 ...
Page 46: ...Chapter 2 Features and Applications ZyWALL USG 300 User s Guide 46 ...
Page 64: ...Chapter 3 Web Configurator ZyWALL USG 300 User s Guide 64 ...
Page 74: ...Chapter 4 Installation Setup Wizard ZyWALL USG 300 User s Guide 74 ...
Page 116: ...Chapter 6 Configuration Basics ZyWALL USG 300 User s Guide 116 ...
Page 184: ...Chapter 7 Tutorials ZyWALL USG 300 User s Guide 184 ...
Page 221: ...Chapter 8 L2TP VPN Example ZyWALL USG 300 User s Guide 221 ...
Page 222: ...Chapter 8 L2TP VPN Example ZyWALL USG 300 User s Guide 222 ...
Page 223: ...223 PART II Technical Reference ...
Page 224: ...224 ...
Page 238: ...Chapter 9 Dashboard ZyWALL USG 300 User s Guide 238 ...
Page 282: ...Chapter 10 Monitor ZyWALL USG 300 User s Guide 282 ...
Page 378: ...Chapter 14 Trunks ZyWALL USG 300 User s Guide 378 ...
Page 394: ...Chapter 15 Policy and Static Routes ZyWALL USG 300 User s Guide 394 ...
Page 408: ...Chapter 16 Routing Protocols ZyWALL USG 300 User s Guide 408 ...
Page 428: ...Chapter 19 NAT ZyWALL USG 300 User s Guide 428 ...
Page 433: ...Chapter 20 HTTP Redirect ZyWALL USG 300 User s Guide 433 ...
Page 434: ...Chapter 20 HTTP Redirect ZyWALL USG 300 User s Guide 434 ...
Page 456: ...Chapter 23 Authentication Policy ZyWALL USG 300 User s Guide 456 ...
Page 474: ...Chapter 24 Firewall ZyWALL USG 300 User s Guide 474 ...
Page 515: ...Chapter 25 IPSec VPN ZyWALL USG 300 User s Guide 515 ...
Page 516: ...Chapter 25 IPSec VPN ZyWALL USG 300 User s Guide 516 ...
Page 529: ...Chapter 26 SSL VPN ZyWALL USG 300 User s Guide 529 ...
Page 530: ...Chapter 26 SSL VPN ZyWALL USG 300 User s Guide 530 ...
Page 540: ...Chapter 27 SSL User Screens ZyWALL USG 300 User s Guide 540 ...
Page 542: ...Chapter 28 SSL User Application Screens ZyWALL USG 300 User s Guide 542 ...
Page 550: ...Chapter 29 SSL User File Sharing ZyWALL USG 300 User s Guide 550 ...
Page 635: ...Chapter 34 IDP ZyWALL USG 300 User s Guide 635 ...
Page 636: ...Chapter 34 IDP ZyWALL USG 300 User s Guide 636 ...
Page 646: ...Chapter 35 ADP ZyWALL USG 300 User s Guide 646 Figure 448 Profiles Protocol Anomaly ...
Page 657: ...Chapter 35 ADP ZyWALL USG 300 User s Guide 657 ...
Page 658: ...Chapter 35 ADP ZyWALL USG 300 User s Guide 658 ...
Page 690: ...Chapter 37 Content Filter Reports ZyWALL USG 300 User s Guide 690 ...
Page 708: ...Chapter 38 Anti Spam ZyWALL USG 300 User s Guide 708 ...
Page 730: ...Chapter 39 Device HA ZyWALL USG 300 User s Guide 730 ...
Page 746: ...Chapter 40 User Group ZyWALL USG 300 User s Guide 746 ...
Page 752: ...Chapter 41 Addresses ZyWALL USG 300 User s Guide 752 ...
Page 764: ...Chapter 43 Schedules ZyWALL USG 300 User s Guide 764 ...
Page 780: ...Chapter 45 Authentication Method ZyWALL USG 300 User s Guide 780 ...
Page 802: ...Chapter 46 Certificates ZyWALL USG 300 User s Guide 802 ...
Page 814: ...Chapter 48 SSL Application ZyWALL USG 300 User s Guide 814 ...
Page 824: ...Chapter 49 Endpoint Security ZyWALL USG 300 User s Guide 824 ...
Page 876: ...Chapter 50 System ZyWALL USG 300 User s Guide 876 ...
Page 916: ...Chapter 54 Reboot ZyWALL USG 300 User s Guide 916 ...
Page 918: ...Chapter 55 Shutdown ZyWALL USG 300 User s Guide 918 ...
Page 938: ...Chapter 56 Troubleshooting ZyWALL USG 300 User s Guide 938 ...
Page 946: ...Chapter 57 Product Specifications ZyWALL USG 300 User s Guide 946 ...
Page 1118: ...Appendix F Open Software Announcements ZyWALL USG 300 User s Guide 1118 ...