Chapter 12 Policy and Static Routes

12.2.1 Policy Route Edit Screen

Click Network > Routing to open the Policy Route screen. Then click the Add or Edit icon to open the Policy Route Edit screen. Use this screen to configure or edit a policy route.

See NAT Loopback Example on page 317 for an example of NAT loopback.

Figure 195 Network > Routing > Policy Route > Edit

The following table describes the labels in this screen.

Table 90 Network > Routing > Policy Route > Edit

LABEL

DESCRIPTION

Configuration

 

 

 

Enable

Select this to activate the policy.

 

 

Description

Enter a descriptive name of up to 31 printable ASCII characters for the policy.

 

 

Criteria

 

 

 

User

Select a user name or user group from which the packets are sent. Select Create

 

Object to configure a new user account (see Section 35.2.1 on page 596 for

 

details).

 

 

Incoming

Click Change... to select an interface or VPN tunnel through which the incoming

Interface

packets are received.

 

 

Source Address

Select a source IP address object or select Create Object to configure a new one.

 

 

Destination

Select a destination IP address object or select Create Object to configure a new

Address

one. If the next hop is a dynamic VPN tunnel and you enable Auto Destination

 

Address, the ZyWALL uses the local network of the peer router that initiated an

 

incoming dynamic IPSec tunnel as the destination address of the policy instead of

 

your configuration here.

 

 

 

281

ZyWALL USG 100/200 Series User’s Guide