ZyXEL Communications ZYWALL USG 1000 Support Notes page 135

ZyWALL USG 1000 Support Notes
Note: The purpose of this policy route is to direct the traffic from 192.168.3.0 which is sent
through the secondary VPN path to be redirected to 192.168.31.0 network and returned
through the original path.
For example, think about when primary VPN tunnel is down, the traffic would go from PC
ZyWALL 2 Plus ZyWALL USG-B (change source IP to 192.168.31.0) ES-4024A to
FTP server (now the packet is with source 192.168.31.0 to destination 192.168.1.33).
The FTP server's gateway is ZyWALL USG-A's ge2 applied via DHCP or manually
configured. So when traffic would return, it will be flowed from FTP server ZyWALL
USG-A's ge2 (which will redirect the traffic to another host ) 192.168.1.254 (which is
ES-4024A's VLAN3 route-domain IP address) ZyWALL USG-B ZyWALL 2 Plus to
the PC behind ZyWALL 2 Plus.
135
All contents copyright (c) 2007 ZyXEL Communications Corporation.