Zyxel ZyWALL USG 20 [146/185] Routing and nat faq

ZyWALL USG Support Notes

146

Routing and NAT FAQ

F01. How to add a policy route?

From the GUI menu Policy >Route, click the “+” icon in the table and define

matching Criteria for this route. Then select a next-hop type. If you want to use Link

HA and Load Balance, “Trunk” should be selected as a next-hop type. If you want to

route traffic into an IPsec tunnel, you need to select “VPN tunnel”. Please note that

the policy routes will be matched in order. If the first route matches the criteria,

ZyWALL USG will use the route setting to direct the traffic to the next hop.

F02. How to configure local loopback in ZyWALL USG?

Local loopback is a feature used in the following scenario.

For a general application the users access to the web service by entering the FQDN

(Full Qualify Domain Name, e.g. http://www.zyxel.com) other than an IP address.

This is because the domain name is easier to remember. However, when both the

Server and Client are located behind the same NAT, a triangle route problem will

encounter. See the example as illustrated below to understand the network topology:

(Here a Web server is used as an example.)

1. The internal user enter the URL and the DNS client in the computer queries the

domain name "xxx.USG2000.com" from the public DNS server and retrieves the Web

USG