ZyXEL Communications ZyXEL ZyWALL USG-1000, Руководство пользователя

Страница: 237 / 986

Chapter 12 Policy and Static Routes
ZyWALL USG 2000 User’s Guide
237
Static Routes
The ZyWALL usually uses the default gateway to route outbound traffic from
computers on the LAN to the Internet. To have the ZyWALL send data to devices
not reachable through the default gateway, use static routes. Configure static
routes if you need to use RIP or OSPF to propagate the routing information to
other routers. See
Chapter 13 on page 249 for more on RIP and OSPF.
Policy Routes Versus Static Routes
• Policy routes are more flexible than static routes. You can select more criteria
for the traffic to match and can also use schedules, NAT, and bandwidth
management.
• Policy routes are only used within the ZyWALL itself. Static routes can be
propagated to other routers using RIP or OSPF.
• Policy routes take priority over static routes. If you need to use a routing policy
on the ZyWALL and propagate it to other routers, you could configure a policy
route and an equivalent static route.
Finding Out More
• See Section 5.4.10 on page 93 for related information on the policy route
screens.
• See Section 12.4 on page 245 for more background information on policy
routing.
• See Section 6.4.3 on page 113 for an example of configuring a policy route for
an IPSec VPN tunnel.
12.2 Policy Route Screen
Click Network > Routing to open the Policy Route screen. Use this screen to
see the configured policy routes and turn policy routing based bandwidth
management on or off.
A policy route defines the matching criteria and the action to take when a packet
meets the criteria. The action is taken only when all the criteria are met. The
criteria can include the user name, source address and incoming interface,
destination address, schedule, IP protocol (ICMP, UDP, TCP, etc.) and port.
The actions that can be taken include:
• Routing the packet to a different gateway, outgoing interface, VPN tunnel, or
trunk.
• Limiting the amount of bandwidth available and setting a priority for traffic.