Chapter 8 Route

Table 44 Command Summary: Policy Route (continued)

COMMAND

DESCRIPTION

[no] tunnel tunnel_name

Sets the incoming interface to an IPSec VPN tunnel. The no command

 

removes the IPSec VPN tunnel through which the incoming packets are

 

received.

 

 

[no] user user_name

Sets the user name. The no command resets the user name to the

 

default (any). any means all users.

policy6 {policy_number append insert

Enters the IPv6 policy-route sub-command mode to configure, add or

policy_number}

insert a policy.

[no] bandwidth <1..1048576> priority

Sets the maximum bandwidth and priority for the policy. The no

<1..1024> [maximize-bandwidth-usage]

command removes bandwidth settings from the rule. You can also turn

 

maximize bandwidth usage on or off.

 

 

[no] deactivate

Disables the specified policy. The no command enables the specified

 

policy.

 

 

[no] description description

Sets a descriptive name for the IPv6 policy. The no command removes

 

the name for the policy.

[no] destination {address6_objectany}

Sets the destination IPv6 IP address the matched packets must have.

 

The no command resets the destination IP address to the default

 

(any). any means all IP addresses.

[no] dscp {any <0..63>}

Sets a custom DSCP code point (0~63). This is the DSCP value of

 

incoming packets to which this policy route applies. any means all

 

DSCP value or no DSCP marker.

 

 

[no] dscp class {default dscp_class}

Sets a DSCP class. Use default to apply this policy route to incoming

 

packets that are marked with DSCP value 0. Use one of the pre-

 

defined AF classes (including af11~af13, af21~af23, af31~af33, and

 

af41~af43) to apply this policy route to incoming packets that are

 

marked with the DSCP AF class.

 

The “af” entries stand for Assured Forwarding. The number following

 

the “af” identifies one of four classes and one of three drop

 

preferences. See Assured Forwarding (AF) PHB for DiffServ on page

 

104 for more details.

 

 

dscp-marking <0..63>

Sets a DSCP value to have the ZyWALL apply that DSCP value to the

 

route’s outgoing packets.

 

 

dscp-marking class {default

Sets how the ZyWALL handles the DSCP value of the outgoing packets

dscp_class}

that match this route. Set this to default to have the ZyWALL set the

 

DSCP value of the packets to 0. Set this to an “af” class (including

 

af11~af13, af21~af23, af31~af33, and af41~af43) which stands for

 

Assured Forwarding. The number following the “af” identifies one of

 

four classes and one of three drop preferences. See Assured

 

Forwarding (AF) PHB for DiffServ on page 104 for more details.

 

 

no dscp-marking

Use this command to have the ZyWALL not modify the DSCP value of

 

the route’s outgoing packets.

exit

Leaves the sub-command mode.

[no] interface interface_name

Sets the interface on which the matched packets are received. The no

 

command resets the incoming interface to the default (any). any

 

means all interfaces.

 

 

[no] next-hop {autogateway gatewayv6

Sets the next-hop to which the matched packets are routed. The no

interface interface_name trunk

command resets next-hop settings to the default (auto).

trunk_nametunnel tunnel_name}

 

[no] schedule schedule_object

Sets the schedule. The no command removes the schedule setting to

 

the default (none). none means any time.

[no] service {service_nameany}

Sets the IP protocol. The no command resets service settings to the

 

default (any). any means all services.

102

 

ZyWALL (ZLD) CLI Reference Guide