ZyXEL Communications ZyWall Reference Manual page 103

Table 44 Command Summary: Policy Route (continued)
COMMAND
[no] source {address6_object|any}
[no] user user_name
[no] policy controll-ipsec-dynamic-rules
activate
policy default-route
policy delete policy_number
policy flush
policy list table
policy move policy_number to policy_number
[no] policy override-direct-route activate
[no] policy controll-virtual-server-rules
activate
[no] policy6 override-direct-route
activate
show bwm activation
show bwm-usage < [policy-route
policy_number] | [interface
interface_name]
show policy-route [policy_number]
show policy-route begin <1..200> end
<1..200>
show policy-route controll-ipsec-dynamic-
rules
show policy-route override-direct-route
show policy-route controll-virtual-server-
rules
show policy-route6 override-direct-route
show policy-route rule_count
show policy-route underlayer-rules
ZyWALL (ZLD) CLI Reference Guide
DESCRIPTION
Sets the source IPv6 IP address that the matched packets must have.
The no command resets the source IP address to the default (any). any
means all IP addresses.
Sets the user name. The no command resets the user name to the
default (any). any means all users.
Enables the ZyWALL to use policy routes to manually specify the
destination addresses of dynamic IPSec rules. You must manually
create these policy routes. The ZyWALL automatically obtains source
and destination addresses for dynamic IPSec rules that do not match
any of the policy routes.
The no command has the ZyWALL automatically obtain source and
destination addresses for all dynamic IPSec rules.
Enters the policy-route sub-command mode to set a route with the
name "default-route".
Removes a routing policy.
Clears the policy routing table.
Displays all policy route settings.
Moves a routing policy to the number that you specified.
Has the ZyWALL forward packets that match a policy route according
to the policy route instead of sending the packets to a directly
connected network. Use the no command to disable it.
Gives policy routes priority over NAT virtual server rules (1-1 SNAT).
Use the no command to give NAT virtual server rules priority over
policy routes.
Has the ZyWALL forward IPv6 packets that match a policy route
according to the policy route instead of sending the packets to a
directly connected network. Use the no command to disable it.
Displays whether or not the global setting for bandwidth management
on the ZyWALL is enabled.
Displays the specified policy route or interface's bandwidth allotment,
current bandwidth usage, and bandwidth usage statistics.
Displays all or specified policy route settings.
Displays the specified range of policy route settings.
Displays whether the ZyWALL checks policy routes first before IPSec
dynamic rules.
Displays whether or not the ZyWALL forwards packets that match a
policy route according to the policy route instead of sending the
packets to a directly connected network.
Displays whether or not policy routes have priority over NAT virtual
server rules (1-1 SNAT).
Displays whether or not the ZyWALL forwards IPv6 packets that match
a policy route according to the policy route instead of sending the
packets to a directly connected network.
Displays the number of policy routes that have been configured on the
ZyWALL.
Displays all policy route rule details for advanced debugging.
Chapter 8 Route
103