Zyxel-communications Internet Security Gateway ZyWALL 100 Manual de usuario descargar pdf (Pagina 264)

ZyWALL 100 Internet Security Gateway

IP Policy Routing 25-1

Chapter 25

IP Policy Routing

This chapter covers setting and applying policies used for IP routing.

25.1 Introduction

Traditionally, routing is based on the destination address only and the ZyWALL takes the shortest path to

forward a packet. IP Policy Routing (IPPR) provides a mechanism to override the default routing behavior

and alter the packet forwarding based on the policy defined by the network administrator. Policy-based

routing is applied to incoming packets on a per interface basis, prior to the normal routing.

25.2 Benefits

• Source-Based Routing – Network administrators can use policy-based routing to direct traffic from

different users through different connections.

• Quality of Service (QoS) – Organizations can differentiate traffic by setting the precedence or ToS

(Type of Service) values in the IP header at the periphery of the network to enable the backbone to

prioritize traffic.

• Cost Savings – IPPR allows organizations to distribute interactive traffic on high-bandwidth, high-cost

paths while using low-cost paths for batch traffic.

• Load Sharing – Network administrators can use IPPR to distribute traffic among multiple paths.

25.3 Routing Policy

Individual routing policies are used as part of the overall IPPR process. A policy defines the matching

criteria and the action to take when a packet meets the criteria. The action is taken only when all the criteria

are met. The criteria include the source address and port, IP protocol (ICMP, UDP, TCP, etc.), destination

address and port, ToS and precedence (fields in the IP header) and length. The inclusion of length criterion

1 2 ... 259 260 261 262 263 264 265 266 267 268 269 ... 355 356

Sin comentarios

Zyxel-communications Internet Security Gateway ZyWALL 100 Manual de usuario Pagina 264