Chapter 9 Policy and Static Routes
ZyWALL 110/310/1100 Series User’s Guide
188
9.1.2 What You Need to Know
Policy Routing
Traditionally, routing is based on the destination address only and the ZyWALL takes the shortest
path to forward a packet. IP Policy Routing (IPPR) provides a mechanism to override the default
routing behavior and alter the packet forwarding based on the policy defined by the network
administrator. Policy-based routing is applied to incoming packets on a per interface basis, prior to
the normal routing.
How You Can Use Policy Routing
• Source-Based Routing – Network administrators can use policy-based routing to direct traffic
from different users through different connections.
• Bandwidth Shaping – You can allocate bandwidth to traffic that matches routing policies and
prioritize traffic. You can also use policy routes to manage other types of traffic (like ICMP traffic)
and send traffic through VPN tunnels.
• Cost Savings – IPPR allows organizations to distribute interactive traffic on high-bandwidth, high-
cost paths while using low-cost paths for batch traffic.
• Load Sharing – Network administrators can use IPPR to distribute traffic among multiple paths.
• NAT - The ZyWALL performs NAT by default for traffic going to or from the WAN interfaces. A
routing policy’s SNAT allows network administrators to have traffic received on a specified
interface use a specified IP address as the source IP address.
Note: The ZyWALL automatically uses SNAT for traffic it routes from internal interfaces to
external interfaces. For example LAN to WAN traffic.
Static Routes
The ZyWALL usually uses the default gateway to route outbound traffic from computers on the LAN
to the Internet. To have the ZyWALL send data to devices not reachable through the default
gateway, use static routes. Configure static routes if you need to use RIP or OSPF to propagate the
routing information to other routers. See
Policy Routes Versus Static Routes
• Policy routes are more flexible than static routes. You can select more criteria for the traffic to
match and can also use schedules, NAT, and bandwidth management.
• Policy routes are only used within the ZyWALL itself. Static routes can be propagated to other
routers using RIP or OSPF.
• Policy routes take priority over static routes. If you need to use a routing policy on the ZyWALL
and propagate it to other routers, you could configure a policy route and an equivalent static
route.
DiffServ
QoS is used to prioritize source-to-destination traffic flows. All packets in the same flow are given
the same priority. CoS (class of service) is a way of managing traffic in a network by grouping
similar types of traffic together and treating each type as a class. You can use CoS to give different
priorities to different packet types.
Summary of Contents for ZyWALL 110 Series
Page 16: ...ZyWALL 110 310 1100 Series User s Guide 16...
Page 32: ...Chapter 1 Introduction ZyWALL 110 310 1100 Series User s Guide 32...
Page 42: ...Chapter 3 Hardware Introduction ZyWALL 110 310 1100 Series User s Guide 42...
Page 68: ...Chapter 4 Quick Setup Wizards ZyWALL 110 310 1100 Series User s Guide 68...
Page 176: ...Chapter 7 Interfaces ZyWALL 110 310 1100 Series User s Guide 176...
Page 186: ...Chapter 8 Trunk ZyWALL 110 310 1100 Series User s Guide 186...
Page 210: ...Chapter 10 Routing Protocols ZyWALL 110 310 1100 Series User s Guide 210...
Page 220: ...Chapter 12 DDNS ZyWALL 110 310 1100 Series User s Guide 220...
Page 228: ...Chapter 13 NAT ZyWALL 110 310 1100 Series User s Guide 228...
Page 240: ...Chapter 15 ALG ZyWALL 110 310 1100 Series User s Guide 240...
Page 246: ...Chapter 16 IP MAC Binding ZyWALL 110 310 1100 Series User s Guide 246...
Page 263: ...Chapter 18 Authentication Policy ZyWALL 110 310 1100 Series User s Guide 263...
Page 264: ...Chapter 18 Authentication Policy ZyWALL 110 310 1100 Series User s Guide 264...
Page 316: ...Chapter 20 IPSec VPN ZyWALL 110 310 1100 Series User s Guide 316...
Page 340: ...Chapter 22 SSL User Screens ZyWALL 110 310 1100 Series User s Guide 340...
Page 442: ...Chapter 36 DHCPv6 ZyWALL 110 310 1100 Series User s Guide 442...
Page 540: ...Appendix A Legal Information ZyWALL 110 310 1100 Series User s Guide 540...
Page 558: ...Index ZyWALL 110 310 1100 Series User s Guide 558...
Page 559: ...Index ZyWALL 110 310 1100 Series User s Guide 559...
Page 560: ...Index ZyWALL 110 310 1100 Series User s Guide 560...
Page 561: ...Index ZyWALL 110 310 1100 Series User s Guide 561...
Page 562: ...Index ZyWALL 110 310 1100 Series User s Guide 562...