ZyXEL Communications ZyWall ATP series User Manual page 307

Table 121 Configuration > Network > Routing > Policy Route > Add/Edit (continued)
LABEL DESCRIPTION
DSCP Marking Set how the Zyxel Device handles the DSCP value of the outgoing packets that match this
route.
Select one of the pre-defined DSCP values to apply or select User Define to specify another
DSCP value. The "af" choices stand for Assured Forwarding. The number following the "af"
identifies one of four classes and one of three drop preferences. See
(AF) PHB for DiffServ
Select preserve to have the Zyxel Device keep the packets' original DSCP value.
Select default to have the Zyxel Device set the DSCP value of the packets to 0.
User-Defined Use this field to specify a custom DSCP value.
DSCP Marking
Address Translation Use this section to configure NAT for the policy route. This section does not apply to policy
routes that use a VPN tunnel as the next hop.
Source Network Select none to not use NAT for the route.
Address Translation
Select outgoing-interface to use the IP address of the outgoing interface as the source IP
address of the packets that matches this route.
To use SNAT for a virtual interface that is in the same WAN trunk as the physical interface to
which the virtual interface is bound, the virtual interface and physical interface must be in
different subnets.
Otherwise, select a pre-defined address (group) to use as the source IP address(es) of the
packets that match this route.
Use Create new Object if you need to configure a new address (group) to use as the
source IP address(es) of the packets that match this route.
Healthy Check Use this part of the screen to configure a route connectivity check and disable the policy if
the interface is down.
Disable policy route Select this to disable the policy if the interface is down or disabled. This is available for
automatically while Interface and Trunk in the Type field above.
Interface link down
Enable Connectivity Select this to turn on the connection check. This is available for Interface and Gateway in
Check the Type field above.
Check Method: Select the method that the gateway allows.
Select icmp to have the Zyxel Device regularly ping the gateway you specify to make sure
it is still available.
Select tcp to have the Zyxel Device regularly perform a TCP handshake with the gateway
you specify to make sure it is still available.
Check Period: Enter the number of seconds between connection check attempts (5-600 seconds).
Check Timeout: Enter the number of seconds to wait for a response before the attempt is a failure (1-10
seconds).
Check Fail Tolerance: Enter the number of consecutive failures before the Zyxel Device stops routing using this
policy (1-10).
Check Port: This field only displays when you set the Check Method to tcp. Specify the port number to
use for a TCP connectivity check (1-65535).
Check this address: Select this to specify a domain name or IP address for the connectivity check. Enter that
domain name or IP address in the field next to it.
OK Click OK to save your changes back to the Zyxel Device.
Cancel Click Cancel to exit this screen without saving.
Chapter 10 Routing
for more details.
ZyWALL ATP Series User's Guide
307
Assured Forwarding