Chapter 5 Managing Traffic
ZyWALL USG 20-2000 User’s Guide
105
5.3.2 Configure the Policy Route
Now you need to configure a policy route that has the ZyWALL use the range of public IP addresses
as the source address for WAN to LAN traffic.
Click
Configuration > Network > Routing > Policy Route > Add
(in
IPv4 Configuration
).
It is recommended to add a description. This example uses
LAN-to-WAN-Range
.
Specifying a
Source Address
is also recommended. This example uses
LAN1_SUBNET
.
Set the
Source Network Address Translation
to
Public-IPs
and click
OK
.
5.4 How to Use Device HA to Backup Your ZyWALL
Use device high availability (HA) to set up an additional ZyWALL as a backup gateway to ensure the
default gateway is always available for the network.
Active-Passive Mode and Legacy Mode
Active-passive mode has a backup ZyWALL take over if the master ZyWALL fails and is
recommended for general device failover deployments. Use legacy mode if you need a more
complex relationship between the master and backup ZyWALLs, such as having both ZyWALLs
active or using different ZyWALLs as the master for individual interfaces. The ZyWALLs must all use
the same device HA mode (either active-passive or legacy).
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
