ZyXEL Communications UAG Series - Page 115

Chapter 16 Route
UAG CLI Reference Guide
115
The following table describes the commands available for policy route. You must use the
configure terminal command to enter the configuration mode before you can use these
commands.
Table 60 Command Summary: Policy Route
COMMAND DESCRIPTION
[no] bwm activate Globally enables bandwidth management. You must globally activate
bandwidth management to have individual policy routes policies apply
bandwidth management. The no command globally disables bandwidth
management.
policy {policy_number | append | insert
policy_number}
Enters the policy-route sub-command mode to configure, add or insert
a policy.
[no] auto-destination When you set tunnel as the next-hop type (using the next-hop
tunnel command) for this route, you can use this command to have
the UAG use the local network of the peer router that initiated an
incoming dynamic IPSec tunnel as the destination address of the policy
instead of what you configure by using the destination command.
The no command disables the setting.
[no] auto-disable When you set interface or trunk as the next-hop type (using the
next-hop interface or next-hop trunk command) for this route,
you can use this command to have the UAG automatically disable this
policy route when the next-hop’s connection is down. The no command
disables the setting.
[no] bandwidth <1..1048576> priority
<1..1024> [maximize-bandwidth-usage]
Sets the maximum bandwidth and priority for the policy. The no
command removes bandwidth settings from the rule. You can also turn
maximize bandwidth usage on or off.
conn-check {IPv4 | FQDN } method {icmp
| tcp} period <5..600> timeout <1..10>
fail-tolerance <1..10> [port
<1..65535>]
Sets the domain name or IP address of the gateway to which the
matched packets are routed. The UAG can regularly check the
connection to the gateway you specified to make sure it is still
available.
icmp | tcp: Select how the UAG checks the connection. The gateway
must be configured to respond to the method you select.
period <5..600>: Enter the number of seconds between connection
check attempts.
timeout <1..10>: Enter the number of seconds to wait for a response
before the attempt is a failure.
fail-tolerance <1..10>: Enter the number of consecutive failures
allowed before the UAG stops routing through the gateway.
port <1..65535>: Specify the port number to use for a TCP
connectivity check.
[no] conn-check activate Turns on the connection check. The no command disables it.
[no] deactivate Disables the specified policy. The no command enables the specified
policy.
[no] description description Sets a descriptive name for the policy. The no command removes the
name for the policy.
[no] destination {
address_object|any} Sets the destination IP address the matched packets must have. The
no command resets the destination IP address to the default (any).
any means all IP addresses.
[no] dscp {any | <0..63>} Sets a custom DSCP code point (0~63). This is the DSCP value of
incoming packets to which this policy route applies. any means all
DSCP value or no DSCP marker.