Zyxel ZyWALL USG 20 [182/185] Zywall usg support notes

ZyWALL USG Support Notes

182

The newly added NAT 1:1 routing rules will always have higher priority than the

policy routes. So it will not be overridden by any policy route.

Way2 --- Delete the policy routes for outgoing traffic from local to internet. Use

default WAN Trunk and default SNAT for the outgoing traffic, and use the 2.20

default routing priority table.

Usually the policy routes that may override IPSec VPN routes and 1:1 NAT routes are

the ones for outgoing traffic, since their source is local subnets/range, and destination

is “Any”.

Step1. After firmware upgrade from v2.1x to v2.20, the interfaces‟ types are all

“general”. They system default WAN Trunk includes all interfaces whose type is

External. So after firmware upgrade, there‟s no interface in the system default WAN

Trunk. We need to change the WAN interfaces‟ type to External, and change

interfaces connected local subnet to Internal.

See the picture below as an example.

So we need to change ge1, ge4, ge5, ge6, ge7 Interface Type to Internal, and change

ge2 and ge3 Interface Type to External.