Chapter 15 Policy and Static Routes
ZyWALL USG 300 User’s Guide
381
Policy Routes Versus Static Routes
• Policy routes are more flexible than static routes. You can select more criteria
for the traffic to match and can also use schedules, NAT, and bandwidth
management.
• Policy routes are only used within the ZyWALL itself. Static routes can be
propagated to other routers using RIP or OSPF.
• Policy routes take priority over static routes. If you need to use a routing policy
on the ZyWALL and propagate it to other routers, you could configure a policy
route and an equivalent static route.
DiffServ
QoS is used to prioritize source-to-destination traffic flows. All packets in the same
flow are given the same priority. CoS (class of service) is a way of managing traffic
in a network by grouping similar types of traffic together and treating each type as
a class. You can use CoS to give different priorities to different packet types.
DiffServ (Differentiated Services) is a class of service (CoS) model that marks
packets so that they receive specific per-hop treatment at DiffServ-compliant
network devices along the route based on the application types and traffic flow.
Packets are marked with DiffServ Code Points (DSCPs) indicating the level of
service desired. This allows the intermediary DiffServ-compliant network devices
to handle the packets differently depending on the code points without the need to
negotiate paths or remember state information for every flow. In addition,
applications do not have to request a particular service or give advanced notice of
where the traffic is going.
DSCP Marking and Per-Hop Behavior
DiffServ defines a new DS (Differentiated Services) field to replace the Type of
Service (TOS) field in the IP header. The DS field contains a 2-bit unused field and
a 6-bit DSCP field which can define up to 64 service levels. The following figure
illustrates the DS field.
DSCP is backward compatible with the three precedence bits in the ToS octet so
that non-DiffServ compliant, ToS-enabled network device will not conflict with the
DSCP mapping.
The DSCP value determines the forwarding behavior, the PHB (Per-Hop Behavior),
that each packet gets across the DiffServ network. Based on the marking rule,
different kinds of traffic can be marked for different kinds of forwarding. Resources
can then be allocated according to the DSCP values and the configured policies.
DSCP (6 bits)
Unused (2 bits)
Содержание USG-300 - V2.20 ED 2
Страница 2: ......
Страница 30: ...Table of Contents ZyWALL USG 300 User s Guide 30 ...
Страница 31: ...31 PART I User s Guide ...
Страница 32: ...32 ...
Страница 38: ...Chapter 1 Introducing the ZyWALL ZyWALL USG 300 User s Guide 38 ...
Страница 46: ...Chapter 2 Features and Applications ZyWALL USG 300 User s Guide 46 ...
Страница 64: ...Chapter 3 Web Configurator ZyWALL USG 300 User s Guide 64 ...
Страница 74: ...Chapter 4 Installation Setup Wizard ZyWALL USG 300 User s Guide 74 ...
Страница 116: ...Chapter 6 Configuration Basics ZyWALL USG 300 User s Guide 116 ...
Страница 128: ...Chapter 7 Tutorials ZyWALL USG 300 User s Guide 128 Figure 73 Configuration Network Interface WLAN Add ...
Страница 184: ...Chapter 7 Tutorials ZyWALL USG 300 User s Guide 184 ...
Страница 221: ...Chapter 8 L2TP VPN Example ZyWALL USG 300 User s Guide 221 ...
Страница 222: ...Chapter 8 L2TP VPN Example ZyWALL USG 300 User s Guide 222 ...
Страница 223: ...223 PART II Technical Reference ...
Страница 224: ...224 ...
Страница 238: ...Chapter 9 Dashboard ZyWALL USG 300 User s Guide 238 ...
Страница 282: ...Chapter 10 Monitor ZyWALL USG 300 User s Guide 282 ...
Страница 303: ...Chapter 13 Interfaces ZyWALL USG 300 User s Guide 303 Figure 269 Configuration Network Interface Ethernet Edit ...
Страница 320: ...Chapter 13 Interfaces ZyWALL USG 300 User s Guide 320 Figure 275 Configuration Network Interface Cellular Add ...
Страница 330: ...Chapter 13 Interfaces ZyWALL USG 300 User s Guide 330 Figure 278 Configuration Network Interface WLAN Add No Security ...
Страница 345: ...Chapter 13 Interfaces ZyWALL USG 300 User s Guide 345 Figure 286 Configuration Network Interface VLAN Edit ...
Страница 355: ...Chapter 13 Interfaces ZyWALL USG 300 User s Guide 355 Figure 288 Configuration Network Interface Bridge Add ...
Страница 378: ...Chapter 14 Trunks ZyWALL USG 300 User s Guide 378 ...
Страница 394: ...Chapter 15 Policy and Static Routes ZyWALL USG 300 User s Guide 394 ...
Страница 408: ...Chapter 16 Routing Protocols ZyWALL USG 300 User s Guide 408 ...
Страница 428: ...Chapter 19 NAT ZyWALL USG 300 User s Guide 428 ...
Страница 433: ...Chapter 20 HTTP Redirect ZyWALL USG 300 User s Guide 433 ...
Страница 434: ...Chapter 20 HTTP Redirect ZyWALL USG 300 User s Guide 434 ...
Страница 456: ...Chapter 23 Authentication Policy ZyWALL USG 300 User s Guide 456 ...
Страница 474: ...Chapter 24 Firewall ZyWALL USG 300 User s Guide 474 ...
Страница 481: ...Chapter 25 IPSec VPN ZyWALL USG 300 User s Guide 481 Figure 355 Configuration VPN IPSec VPN VPN Connection Edit IKE ...
Страница 492: ...Chapter 25 IPSec VPN ZyWALL USG 300 User s Guide 492 Figure 358 Configuration VPN IPSec VPN VPN Gateway Edit ...
Страница 515: ...Chapter 25 IPSec VPN ZyWALL USG 300 User s Guide 515 ...
Страница 516: ...Chapter 25 IPSec VPN ZyWALL USG 300 User s Guide 516 ...
Страница 529: ...Chapter 26 SSL VPN ZyWALL USG 300 User s Guide 529 ...
Страница 530: ...Chapter 26 SSL VPN ZyWALL USG 300 User s Guide 530 ...
Страница 540: ...Chapter 27 SSL User Screens ZyWALL USG 300 User s Guide 540 ...
Страница 542: ...Chapter 28 SSL User Application Screens ZyWALL USG 300 User s Guide 542 ...
Страница 550: ...Chapter 29 SSL User File Sharing ZyWALL USG 300 User s Guide 550 ...
Страница 635: ...Chapter 34 IDP ZyWALL USG 300 User s Guide 635 ...
Страница 636: ...Chapter 34 IDP ZyWALL USG 300 User s Guide 636 ...
Страница 646: ...Chapter 35 ADP ZyWALL USG 300 User s Guide 646 Figure 448 Profiles Protocol Anomaly ...
Страница 657: ...Chapter 35 ADP ZyWALL USG 300 User s Guide 657 ...
Страница 658: ...Chapter 35 ADP ZyWALL USG 300 User s Guide 658 ...
Страница 690: ...Chapter 37 Content Filter Reports ZyWALL USG 300 User s Guide 690 ...
Страница 708: ...Chapter 38 Anti Spam ZyWALL USG 300 User s Guide 708 ...
Страница 730: ...Chapter 39 Device HA ZyWALL USG 300 User s Guide 730 ...
Страница 746: ...Chapter 40 User Group ZyWALL USG 300 User s Guide 746 ...
Страница 752: ...Chapter 41 Addresses ZyWALL USG 300 User s Guide 752 ...
Страница 764: ...Chapter 43 Schedules ZyWALL USG 300 User s Guide 764 ...
Страница 780: ...Chapter 45 Authentication Method ZyWALL USG 300 User s Guide 780 ...
Страница 802: ...Chapter 46 Certificates ZyWALL USG 300 User s Guide 802 ...
Страница 814: ...Chapter 48 SSL Application ZyWALL USG 300 User s Guide 814 ...
Страница 820: ...Chapter 49 Endpoint Security ZyWALL USG 300 User s Guide 820 Figure 534 Configuration Object Endpoint Security Add ...
Страница 824: ...Chapter 49 Endpoint Security ZyWALL USG 300 User s Guide 824 ...
Страница 876: ...Chapter 50 System ZyWALL USG 300 User s Guide 876 ...
Страница 916: ...Chapter 54 Reboot ZyWALL USG 300 User s Guide 916 ...
Страница 918: ...Chapter 55 Shutdown ZyWALL USG 300 User s Guide 918 ...
Страница 938: ...Chapter 56 Troubleshooting ZyWALL USG 300 User s Guide 938 ...
Страница 946: ...Chapter 57 Product Specifications ZyWALL USG 300 User s Guide 946 ...
Страница 1118: ...Appendix F Open Software Announcements ZyWALL USG 300 User s Guide 1118 ...