M01. How Do Zywalls Dispatch Outgoing Sessions To Different Wan Connections - ZyXEL Communications ZyWALL 5 Support Notes

M01. How do ZyWALLs dispatch outgoing sessions to different WAN connections?

When load-balance is enabled on ZyWALLs which have multiple WAN connections (e.g. ZyWALL
35/70/1000), the ZyWALL will dispatch the outgoing traffic which refers to default route (no policy route or
static route applied to it). The traffic will be forwarded to the wan connections according the load-balance
algorithms selected (e.g. Spiller-Over, Weighted Round Robin, or Least-Load First). When the outgoing session
is dispatched to a specific wan connection (e.g. WAN1 or WAN2), the session will be fixed on this connection
until it is terminated by the hosts or servers.
M02. Can ZyWALL support VPN load balancing?
No, because when using IPSec VPN, you need to specify source/destination
security gateways, thus ZW can NOT dynamically change gateway (WAN) to go
in/out. And with Load balancing mechanism, session manager in ZyWALL will
decide each session will go to primary WAN or secondary WAN. That is, one
session may possible to be sent via primary WAN or secondary WAN. In this
way, it may cause the gateway is not the same as defined in VPN rule.
As for ZyWALL v3.64, we only supports BWM and fail-over for VPN tunnel.
N. Bandwidth Management FAQ
N01. How many class can I create in ZyWALL Bandwidth Management class tree? And,
what is the max depth of a class?
Number of classes and max depth of a class supported on ZyWALL's Bandwidth management is model
specific.
(1) Max depth of a classes
ZyWALL 70: 5
ZyWALL 35: 3
ZyWALL 5: 1
(2) Number of classes
ZyWALL 70: 100
ZyWALL 35: 50
ZyWALL 5: 20
All contents copyright (c) 2006 ZyXEL Communications Corporation.
ZyWALL 5 Support Notes
303