41

Packet Flow Explore

41.1 Overview

Use this to get a clear picture on how the ZyWALL determines where to forward a packet and how to change the source IP address of the packet according to your current settings. This function provides you a summary of all your routing and SNAT settings and helps troubleshoot any related problems.

41.1.1What You Can Do in this Chapter

•Use the Routing Status screen (see Section 41.2 on page 518) to view the overall routing flow and each routing function’s settings.

•Use the SNAT Status screen (see Section 41.3 on page 522) to view the overall source IP address conversion (SNAT) flow and each SNAT function’s settings.

41.2 The Routing Status Screen

The Routing Status screen allows you to view the current routing flow and quickly link to specific routing settings. Click a function box in the Routing Flow section, the related routes (activated) will display in the Routing Table section. To access this screen, click Maintenance > Packet Flow Explore.

The order of the routing flow may vary depending on whether you:

•select use policy route to override direct route in the CONFIGURATION > Network > Routing > Policy Route screen.

•use policy routes to control 1-1 NAT by using the policy control-virtual-server-rules activate command.

•select use policy routes to control dynamic IPSec rules in the CONFIGURATION > VPN > IPSec VPN > VPN Connection screen.

Note: Once a packet matches the criteria of a routing rule, the ZyWALL takes the corresponding action and does not perform any further flow checking.

 

518

ZyWALL 110/310/1100 Series User’s Guide