Table of Contents
Advertisement
Routing
Policy-based routing
Normally, a routing device determines how to route a network packet based on its destination
address. However, you can use policy-based routing to forward the packet based on other criteria,
such as the source of the packet. For example, you can configure the IX20 device so that high-priority
traffic is routed through the cellular connection, while all other traffic is routed through an Ethernet
(WAN) connection.
Policy-based routing for the IX20 device uses the following criteria to determine how to route traffic:
Firewall zone (for example, internal/outbound traffic, external/inbound traffic, or IPSec tunnel
n
traffic).
Network interface (for example, the cellular connection, the WAN, or the LAN).
n
IPv4 address.
n
IPv6 address.
n
MAC address.
n
Domain.
n
Protocol type (TCP, UDP, ICMP, or all).
n
The order of the policies is important. Routing policies are processed sequentially; as a result, if a
packet matches an earlier policy, it will be routed using that policy's rules. It will not be processed by
any subsequent rules.
Configure a routing policy
Required configuration items
The packet matching parameters. It can any combination of the following:
n
Source interface.
l
Source address. This can be a firewall zone, an interface, a single IPv4/IPv6 address or
l
network, or a MAC address.
Destination address. This can be a firewall zone, an interface, a single IPv4/IPv6 address or
l
network, or a domain.
Protocol. This can be any, tcp, udp or icmp.
l
Source port. This is only used if the protocol is set to tcp or udp.
l
Destination port. This is only used if protocol is set to tcp or udp.
l
The network interface used to reach the destination.
n
Additional configuration items
A label for the routing policy.
n
Whether packets that match this policy should be dropped when the gateway interface is
n
disconnected, rather than forwarded through other interfaces.
To configure a routing policy:
WebUI
IX20 User Guide
IP routing
237
Advertisement
Table of Contents
