Zyxel ZyWALL USG 50 [11/185] Zywall usg support notes

ZyWALL USG Support Notes

USG receives traffic from LAN1, destination is 172.25.27.5, which is in the direct

connected subnet of WAN2 172.25.27.3. Direct route takes first priority. So the traffic

will be sent out from WAN2, although in the policy route the next hop is WAN1.

2. Policy Route takes the second routing priority.

There‟s an advanced setting in Policy Route, which is “Use Policy Route to Override

Direct Route”. This function will enable Policy Route to take priority over Direct

Route. For detail, please go to 1.8 Policy Route vs. Direct Route

3. One to One NAT routing takes third priority.

Different from ZLD v2.1x, One to One NAT routing is generated automatically by

system after One to One NAT rule is set in Configuration>Network>NAT. For

detailed explanation, please go to section 1.4 Setting up One to One NAT

4. IPSec VPN routing takes fourth priority.

Different from ZLD v2.1x, routing for IPSec VPN traffic is generated automatically

by system. There‟s no need to add policy routes for IPSec VPN one by one. For

detailed explanation, please go to section 1.9 Routing for IPSec VPN

5. Static Routes and dynamic routes take fifth priority.

Static routes are manually added by administrator, specifying the next hop for certain

destination. Dynamic routes are system dynamically learned routes through routing

protocols, such as RIP and OSPF.

6. Default WAN Trunk takes the sixth priority.

From ZLD v2.20, there‟s a default WAN Trunk for system routing. If no routings in

the higher priorities are present in the device, USG can use the Default WAN Trunk to

route traffic. Usually the Default WAN Trunk includes all the systems WAN interfaces

and ppp interfaces. For detailed explanation, please go to section 1.2 Default WAN

Trunk and Default SNAT.

7. Routings in system Main route table take last priority in routing.

Main route table generally contains default route learnt from interface default

gateway.

For example, in WAN2 interface, the default gateway is 200.0.0.2. If there‟s not any

routings with higher priorities, the USG will use this route: Sending traffic to gateway

200.0.0.2.