12

Policy and Static Routes

12.1 Policy and Static Routes Overview

Use policy routes and static routes to override the ZyWALL’s default routing behavior in order to send packets through the appropriate the interface or VPN tunnel.

For example, the next figure shows a computer (A) connected to the ZyWALL’s LAN interface. The ZyWALL routes most traffic from A to the Internet through the ZyWALL’s default gateway (R1). You create one policy route to connect to services offered by your ISP behind router R2. You create another policy route to communicate with a separate network behind another router (R3) connected to the LAN.

Figure 193 Example of Policy Routing Topology

A

R1

LANWAN

R3

R2

You also use policy routes to send traffic through VPN tunnels. Using the VPN wizard automatically configures a corresponding policy route, but you must manually configure a policy route if you use the main VPN screens to configure a VPN connection.

"You can generally just use policy routes. You only need to use static routes if you have a large network with multiple routers where you use RIP or OSPF to propagate routing information to other routers.

 

277

ZyWALL USG 100/200 Series User’s Guide