ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 User Manual page 227

Table 67 Network > Routing > Policy Route > Edit (continued)
LABEL
Type
Gateway
VPN Tunnel
Trunk
Interface
Address
Translation
Source Network
Address
Translation
Port Triggering
#
Incoming Service
Trigger Service
Add icon
ZyWALL 1050 User's Guide
DESCRIPTION
Select Auto to have the ZyWALL use the routing table to find a next-hop and
forward the matched packets automatically.
Select Gateway to route the matched packets to the next-hop router or switch you
specified in the Gateway field. You have to set up the next-hop router or switch as
a HOST address object first.
Select VPN Tunnel to route the matched packets via the specified VPN tunnel.
Select Trunk to route the matched packets through the interfaces in the trunk
group based on the load balancing algorithm.
Select Interface to route the matched packets through the specified outgoing
interface to a gateway (which is connected to the interface).
This field displays when you select Gateway in the Type field. Select a HOST
address object. The gateway is an immediate neighbor of your ZyWALL that will
forward the packet to the destination. The gateway must be a router or switch on
the same segment as your ZyWALL's interface(s).
This field displays when you select VPN Tunnel in the Type field. Select a VPN
tunnel through which the packets are sent to the remote network that is connected
to the ZyWALL directly.
This field displays when you select Trunk in the Type field. Select a trunk group to
have the ZyWALL send the packets via the interfaces in the group.
This field displays when you select Interface in the Type field. Select an interface
to have the ZyWALL send traffic that matches the policy route through the
specified interface.
Select none to not use NAT for the route.
Select outgoing-interface to use the IP address of the outgoing interface as the
source IP address of the packets that matches this route. If you select outgoing-
interface, you can also configure port trigger settings for this interface.
Otherwise, select a pre-defined address (group) to use as the source IP
address(es) of the packets that match this route.
Select Create Object to configure a new address (group) to use as the source IP
address(es) of the packets that match this route.
This is the rule index number.
Select the service that the client computer sends to a remote server.
The incoming service should have the same service or protocol type as what you
configured in the Service field.
Select a service that a remote server sends. It causes (triggers) the ZyWALL to
forward the traffic (received on the outgoing interface) to the client computer that
requested the service.
Click the Add icon in the heading row to add a new first entry.
Click the Add icon in an entry to add a rule below the current entry.
Click the Remove icon to delete an existing rule from the ZyWALL. A window
displays asking you to confirm that you want to delete the rule.
In a numbered list, click the Move to N icon to display a field to type a number for
where you want to put that rule and press [ENTER] to move the rule to the number
that you typed.
The ordering of your rules is important as they are applied in order of their
numbering.
Chapter 12 Policy and Static Routes
227