ZyXEL Communications HS100/HS100W manual Gateways on the WAN Side, How To Configure Triangle Route

HomeSafe User’s Guide

Step 1.	A computer on the LAN initiates a connection by sending a SYN packet to a receiving server
	on the WAN.
Step 2.	The HomeSafereroutes the packet to Gateway B which is in Subnet 2.
Step 3.	The reply from WAN goes through the HomeSafeto the computer on the LAN in Subnet 1.

Diagram K-3 IP Alias

Gateways on the WAN Side

A second solution to the “triangle route” problem is to put all of your network gateways on the WAN side as the following figure shows. This ensures that all incoming network traffic passes through your HomeSafeto your LAN. Therefore your LAN is protected.

Diagram K-4 Gateways on the WAN Side

How To Configure Triangle Route:

Step 1. From the SMT main menu, enter 24.

Step 2. Enter “8” in menu 24 to enter CI command mode.

Step 3. Use the following commands to allow/disallow triangle route.

sys firewall ignore triangle all	This command allows triangle route.
off
sys firewall ignore triangle all on	This command disallows triangle route.

K-2 Triangle Route