Static Routes - ZyXEL Communications ZyWALL 1050 User Manual

ZyWALL 1050 User's Guide
8 For the Next Hop fields, select Interface as the Type if you have a single WAN
connection or Trunk if you have multiple WAN connections.
9 Select the interface that you are using for your WAN connection (ge2 and ge3 are WAN
interfaces by default). If you have multiple WAN connections, select the trunk.
10Specify the amount of bandwidth FTP traffic can use. You may also want to set a low
priority for FTP traffic.
Note: The ZyWALL checks the policy routes in the order that they are listed. So make
sure that your custom policy route comes before any other routes that would
also match the FTP traffic.

Static Routes

Use static routes to tell the ZyWALL about networks not directly connected to the ZyWALL.
MENU ITEM(S)
PREREQUISITES
Firewall
The firewall allows you to control traffic between or within zones. You might also configure
the firewall to control traffic for virtual server (port forwarding) and policy routes (NAT). You
can configure firewall rules based on schedules, specific users (or user groups), source or
destination addresses (or address groups) and services (or service groups). Each of these must
be configured in a different screen first.
To-ZyWALL firewall rules control access to the ZyWALL. By default, the firewall allows any
computer from the LAN zone to access or manage the ZyWALL. The ZyWALL drops packets
from the WAN or DMZ zone to the ZyWALL itself, except for Device HA and VPN traffic.
Configure to-ZyWALL firewall rules for remote management..
MENU ITEM(S)
PREREQUISITES
Example: Suppose you have a SIP proxy server connected to the DMZ-2 zone for VoIP calls.
You could configure a firewall rule to allow VoIP sessions from the SIP proxy server on
DMZ-2 to the LAN so VoIP users on the LAN can receive calls.
1 Create a VoIP service object for UDP port 5060 traffic (Objects > Service).
2 Create an address object for the VoIP server (Objects > Address).
3 Click Policy > Firewall to go to the firewall configuration.
4 Select from the DMZ-2 zone to the LAN zone, and add a firewall rule using the items
you have configured.
• You don't need to specify the schedule or the user.
112
Policy > Route > Static Route
Interfaces
Policy > Firewall
Zones, schedules, users, user groups, addresses (source, destination), address
groups (source, destination), services, service groups
Chapter 5 Configuration Basics