ZyXEL Communications ZyWALL 110 Series, Руководство пользователя, Страница: 530 / 562

Chapter 44 Troubleshooting
ZyWALL 110/310/1100 Series User’s Guide
530
The ZyWALL is deleting some zipped files.
The ZyWALL cannot unzip password protected ZIP files or a ZIP file within another ZIP file. There
are also limits to the number of ZIP files that the ZyWALL can concurrently unzip.
The ZyWALL routes and applies SNAT for traffic from some interfaces but not from others.
The ZyWALL automatically uses SNAT for traffic it routes from internal interfaces to external
interfaces. For example LAN to WAN traffic. You must manually configure a policy route to add
routing and SNAT settings for an interface with the Interface Type set to General. You can also
configure a policy route to override the default routing and SNAT behavior for an interface with the
Interface Type set to Internal or External.
I cannot get Dynamic DNS to work.
• You must have a public WAN IP address to use Dynamic DNS.
• Make sure you recorded your DDNS account’s user name, password, and domain name and have
entered them properly in the ZyWALL.
• You may need to configure the DDNS entry’s IP Address setting to Auto if the interface has a
dynamic IP address or there are one or more NAT routers between the ZyWALL and the DDNS
server.
• The ZyWALL may not determine the proper IP address if there is an HTTP proxy server between
the ZyWALL and the DDNS server.
I cannot create a second HTTP redirect rule for an incoming interface.
You can configure up to one HTTP redirect rule for each (incoming) interface.
The ZyWALL keeps resetting the connection.
If an alternate gateway on the LAN has an IP address in the same subnet as the ZyWALL’s LAN IP
address, return traffic may not go through the ZyWALL. This is called an asymmetrical or “triangle”
route. This causes the ZyWALL to reset the connection, as the connection has not been
acknowledged.
You can set the ZyWALL’s firewall to permit the use of asymmetrical route topology on the network
(so it does not reset the connection) although this is not recommended since allowing asymmetrical
routes may let traffic from the WAN go directly to the LAN without passing through the ZyWALL. A
better solution is to use virtual interfaces to put the ZyWALL and the backup gateway on separate