Chapter 18 Route
ZyWALL Series CLI Reference Guide
172
no dscp-marking
Use this command to have the Zyxel Device not modify the DSCP value of
the route’s outgoing packets.
exit
Leaves the sub-command mode.
[no] interface interface_name
Sets the interface on which the incoming packets are received. The no
command resets the incoming interface to the default (
any). any
means all interfaces.
ZyWALL is a default interface which the Zyxel Device uses to send
internally generated trafffic. For example, the Zyxel Device uses the
ZyWALL interface to download device licensing information from MyZyxel,
and to send authentication requests to an external RADIUS server.
[no] next-hop {auto|gateway
address object |interface
interface_name |trunk
trunk_name|tunnel tunnel_name}
Sets the next-hop to which the matched packets are routed. The no
command resets next-hop settings to the default (
auto).
[no] schedule schedule_object
Sets the schedule. The no command removes the schedule setting to the
default (
none). none means any time.
[no] service {service_name|any}
Sets the IP protocol. The no command resets service settings to the
default (
any). any means all services.
[no] snat {outgoing-interface|
{address_object}}
Applies Source Network Address Translation (SNAT) to packets within the
policy route. Each packet’s source address is rewritten to the IP address of
the outgoing interface or address object.
The
no command removes source NAT settings from the rule.
Note: If the address object is a group or range of IP addresses,
then the Zyxel Device picks one IP address randomly from
the group or range, and then assigns the address
perminantly to the policy.
Note: In Zyxel Device firmware version 4.60 and earlier, it is not
possible to configure this setting if the policy’s interface is
set to “ZyWALL”. In Zyxel Device firmware version 5.0 and
later, this limitation is removed.
Note: To configure this setting in the Web Configurator when the
policy’s interface is set to “ZyWALL”, you must using the gui-
visibility command. For details, see Section 72.4 on page
602.
[no] source {address_object|any}
Sets the source IP address that the matched packets must have. The no
command resets the source IP address to the default (
any). any means
all IP addresses.
[no] srcport {profile_name|any}
Sets the source port that the matched packets must have. The no
command resets the source port to the default (
any). any means all
ports.
[no] sslvpn tunnel_name
Sets the incoming interface to an SSL VPN tunnel. The no command
removes the SSL VPN tunnel through which the incoming packets are
received.
[no] tunnel tunnel_name
Sets the incoming interface to an IPSec VPN tunnel. The no command
removes the IPSec VPN tunnel through which the incoming packets are
received.
[no] user user_name
Sets the user name. The no command resets the user name to the default
(any). any means all users.
Table 82 Command Summary: Policy Route (continued)
COMMAND DESCRIPTION
To Next Page
Loading...
