Zyxel ZyWALL USG 300 [151/185] Zywall usg support notes

ZyWALL USG Support Notes

151

F06. What’s the routing order of policy route, dynamic route,

and static route and direct connect subnet table?

All these routing information create the ZyWALL USG routing database. When

routing, ZyWALL USG will search with the following order:

1. Local and direct connect subnet table.

2. Policy route rule.

3. Main table, which includes routes learned from RIP/OSPF, static routes and

default routes.

F07. Why ZyWALL USG cannot ping the Internet host, but PC

from LAN side can browse internet WWW?

This is mainly caused by your interface configuration. If you setup two WAN

interfaces, which have gateway IP address configured, the default route will have two

entries added in ZyWALL USG. If one of the WAN interfaces can‟t connect to the

internet (for example, ppp interface don‟t dialup successfully), and this interface has

smaller metric than the other WAN interface, ZyWALL USG will select this as default

route and traffic can‟t go out from the ZyWALL USG.

F08. Why can’t I ping to the, Internet, after I shutdown the

primary WAN interface?

ZyWALL USG routes packets by checking session information first. Once packet

matched a session that is already created, it would not lookup the routing table. So the

interface status change doesn‟t affect the routing result until a new session is created.

If you continually ping internet host and shutdown the ZyWALL USG primary WAN

interface, the ping packet still matches the original session, which is bound to primary

WAN interface already. The session timeout for ICMP is 15 second.

F09. Why the virtual server or port trigger does not work?

If virtual server or port trigger (or any traffic from WAN zone to LAN zone) doesn‟t