ZyXEL ZyWALL USG 50 User Manual - Page 97

Chapter 6 Configuration Basics 6.5.5 Trunks Use trunks to set up load balancing using two or more interfaces. MENU ITEM(S) Configuration > Network > Interface > Trunk PREREQUISITES Interfaces WHERE USED Policy routes Example: See Chapter 7 on page 109. 6.5.6 Policy Routes Use policy routes to override the ZyWALL's default routing behavior in order to send packets through the appropriate interface or VPN tunnel. You can also use policy routes for bandwidth management (out of the ZyWALL), port triggering, and general NAT on the source address. You have to set up the criteria, next-hops, and NAT settings first. MENU ITEM(S) Configuration > Network > Routing > Policy Route Criteria: users, user groups, interfaces (incoming), IPSec VPN (incoming), addresses (source, destination), address groups (source, destination), schedules, services, service groups PREREQUISITES Next-hop: addresses (HOST gateway), IPSec VPN, SSL VPN, trunks, interfaces NAT: addresses (translated address), services and service groups (port triggering) Example: You have an FTP server connected to P6 (in the DMZ zone). You want to limit the amount of FTP traffic that goes out from the FTP server through your WAN connection. 1 Create an address object for the FTP server (Object > Address). 2 Click Configuration > Network > Routing > Policy Route to go to the policy route configuration screen. Add a policy route. 3 Name the policy route. 4 Select the interface that the traffic comes in through (P3 in this example). 5 Select the FTP server's address as the source address. 6 You don't need to specify the destination address or the schedule. 7 For the service, select FTP. ZyWALL USG 50 User's Guide 97