Appendix G Triangle Route; The Ideal Setup; The "Triangle Route" Problem; Figure 170 Ideal Setup - ZyXEL Communications P-2602R-DxA Series User Manual

The Ideal Setup

When the firewall is on, your ZyXEL Device acts as a secure gateway between your LAN and
the Internet. In an ideal network topology, all incoming and outgoing network traffic passes
through the ZyXEL Device to protect your LAN against attacks.

Figure 170 Ideal Setup

The "Triangle Route" Problem

A traffic route is a path for sending or receiving data packets between two Ethernet devices.
Some companies have more than one alternate route to one or more ISPs. If the LAN and
ISP(s) are in the same subnet, the "triangle route" problem may occur. The steps below
describe the "triangle route" problem.
1 A computer on the LAN initiates a connection by sending out a SYN packet to a
receiving server on the WAN.
2 The ZyXEL Device reroutes the SYN packet through Gateway B on the LAN to the
WAN.
3 The reply from the WAN goes directly to the computer on the LAN without going
through the ZyXEL Device.
As a result, the ZyXEL Device resets the connection, as the connection has not been
acknowledged.

Appendix G Triangle Route

P-2602R/RL-DxA Series User's Guide
A
P P E N D I X
Triangle Route
G
299