Chapter 6 Configuration Basics

6.5.5 Trunks

Use trunks to set up load balancing using two or more interfaces.

MENU ITEM(S)

Configuration > Network > Interface > Trunk

PREREQUISITES

Interfaces

WHERE USED

Policy routes

 

 

Example: See Chapter 7 on page 109.

6.5.6 Policy Routes

Use policy routes to override the ZyWALL’s default routing behavior in order to send packets through the appropriate interface or VPN tunnel. You can also use policy routes for bandwidth management (out of the ZyWALL), port triggering, and general NAT on the source address. You have to set up the criteria, next-hops, and NAT settings first.

MENU ITEM(S)

Configuration > Network > Routing > Policy Route

 

Criteria: users, user groups, interfaces (incoming), IPSec VPN

 

(incoming), addresses (source, destination), address groups (source,

 

destination), schedules, services, service groups

PREREQUISITES

Next-hop: addresses (HOST gateway), IPSec VPN, SSL VPN, trunks,

 

interfaces

 

NAT: addresses (translated address), services and service groups

 

(port triggering)

 

 

Example: You have an FTP server connected to P6 (in the DMZ zone). You want to limit the amount of FTP traffic that goes out from the FTP server through your WAN connection.

1Create an address object for the FTP server (Object > Address).

2Click Configuration > Network > Routing > Policy Route to go to the policy route configuration screen. Add a policy route.

3Name the policy route.

4Select the interface that the traffic comes in through (P3 in this example).

5Select the FTP server’s address as the source address.

6You don’t need to specify the destination address or the schedule.

7For the service, select FTP.

 

97

ZyWALL USG 50 User’s Guide