ZyXEL Communications ZyWALL USG Series, Reference Manual

Page: 123 / 426

Chapter 15 Route
ZyWALL / USG (ZLD) CLI Reference Guide
123
dscp-marking class {default |
dscp_class }
Sets how the ZyWALL / USG handles the DSCP value of the outgoing
packets that match this route. Set this to
default
to have the ZyWALL
/ USG set the DSCP value of the packets to 0. Set this to an “af” class
(including af11~af13, af21~af23, af31~af33, and af41~af43) which
stands for Assured Forwarding. The number following the “af”
identifies one of four classes and one of three drop preferences. See
Assured Forwarding (AF) PHB for DiffServ on page 124 for more
details.
dscp_class
can set cs0~cs7 too.
no dscp-marking
Use this command to have the ZyWALL / USG not modify the DSCP
value of the route’s outgoing packets.
exit
Leaves the sub-command mode.
[no] interface interface_name
Sets the interface on which the matched packets are received. The
no
command resets the incoming interface to the default (
any
).
any
means all interfaces.
[no] next-hop {auto|gateway
address_object |interface
interface_name |trunk
trunk_name |tunnel tunnel_name }
Sets the next-hop to which the matched packets are routed. The
no
command resets next-hop settings to the default (
auto
).
[no] schedule schedule_object
Sets the schedule. The
no
command removes the schedule setting to
the default (
none
).
none
means any time.
[no] service { service_name |any}
Sets the IP protocol. The
no
command resets service settings to the
default (
any
).
any
means all services.
[no] source { address6_object |any}
Sets the source IPv6 IP address that the matched packets must have.
The
no
command resets the source IP address to the default (
any
).
any
means all IP addresses.
[no] srcport { profile_name |any}
Sets the source port that the matched packets must have. The
no
command resets the source port to the default (
any
).
any
means all
ports.
[no] tunnel tunnel_name
Sets the incoming interface to an IPSec VPN tunnel. The
no
command
removes the IPSec VPN tunnel through which the incoming packets are
received.
[no] user user_name
Sets the user name. The
no
command resets the user name to the
default (
any
).
any
means all users.
[no] policy controll-ipsec-dynamic-rules
activate
Enables the ZyWALL / USG to use policy routes to manually specify the
destination addresses of dynamic IPSec rules. You must manually
create these policy routes. The ZyWALL / USG automatically obtains
source and destination addresses for dynamic IPSec rules that do not
match any of the policy routes.
The no command has the ZyWALL / USG automatically obtain source
and destination addresses for all dynamic IPSec rules.
policy default-route
Enters the policy-route sub-command mode to set a route with the
name “default-route”.
policy delete policy_number
Removes a routing policy.
policy flush
Clears the policy routing table.
policy list table
Displays all policy route settings.
policy move policy_number to policy_number
Moves a routing policy to the number that you specified.
[no] policy override-direct-route activate
Has the ZyWALL / USG forward packets that match a policy route
according to the policy route instead of sending the packets to a
directly connected network. Use the
no
command to disable it.
Table 60
Command Summary: Policy Route (continued)
COMMAND DESCRIPTION