Chapter 5 Configuration Basics

PREREQUISITES

Interfaces (with a static IP address), to-ZyWALL firewall

 

 

Example: See Chapter 6 on page 125.

5.4.9 DDNS

Dynamic DNS maps a domain name to a dynamic IP address. The ZyWALL helps maintain this mapping.

MENU ITEM(S)

Network > DDNS

PREREQUISITES

Interface

 

 

5.4.10 Policy Routes

Use policy routes to control the routing of packets through the ZyWALL’s interfaces, trunks, and send traffic through VPN connections. You also use policy routes for bandwidth management (out of the ZyWALL), port triggering, and general NAT on the source address. You have to set up the criteria, next-hops, and NAT settings in other screens first.

MENU ITEM(S)

Network > Routing > Policy Route

 

Criteria: users, user groups, interfaces (incoming), IPSec VPN (incoming),

 

addresses (source, destination), address groups (source, destination),

PREREQUISITES

schedules, services, service groups

Next-hop: addresses (HOST gateway), IPSec VPN, SSL VPN, trunks, interfaces

 

 

NAT: addresses (translated address), services and service groups (port

 

triggering)

 

 

Example: You have an FTP server connected to dmz (in the DMZ zone). You want to limit the amount of FTP traffic that goes out from the FTP server through your WAN connection.

1Create an address object for the FTP server (Object > Address).

2Click Network > Routing > Policy Route to go to the policy route configuration screen. Add a policy route.

3Name the policy route.

4Select the interface that the traffic comes in through (dmz in this example).

5Select the FTP server’s address as the source address.

6You don’t need to specify the destination address or the schedule.

7For the service, select FTP.

8For the Next Hop fields, select Interface as the Type if you have a single WAN connection or Trunk if you have multiple WAN connections.

9Select the interface that you are using for your WAN connection (wan1 and wan2 are the default WAN interfaces). If you have multiple WAN connections, select the trunk.

10Specify the amount of bandwidth FTP traffic can use. You may also want to set a low priority for FTP traffic.

116

 

ZyWALL USG 100/200 Series User’s Guide