The USG/ATP unfortunately can only route one network subnet or a range of consecutive IP addresses through the VPN. Note: Check the “Disable policy route automatically while Interface link down” to have the route disable automatically, if the configured WAN interface is down to use the other WAN interface as backup.Ĭreate a second rule for the Guest network (whether it be LAN2, DMZ, a bridge interface or VLAN) using WAN2 for the Next-Hop. This can be achieved by creating two policy routes, one to send LAN1's traffic out the fast internet connection and the second to send the guest traffic out the slower connection.įor this example WAN1 is the fast connection and WAN2 is the slower internet connection. To optimize the internal networks (LAN1) performance you may want to force this traffic through the faster most reliable internet connection while guest use a slower internet connection. Routing Internal Traffic Through Specific WANĭepending on your implementation, you may be using multiple internet connections and multiple internal networks (LAN1 and Guest for example). Policy-based routing is applied to incoming packets on an interface, prior to the normal routing.īelow are examples for some of the most common scenarios. IP Policy Routing provides a mechanism to override the default routing behaviorĪnd alter the packet forwarding based on the policy defined by the network administrator. Traditionally, routing is based on the destination address only and the USG/ATP takes the shortest path to forward a packet. Use policy routes to override the default routing behavior in order to send packets through the appropriate interface and/or VPN tunnel(s). SNAT (Source Network Address Translation) Routing

Routing Internal Traffic Through Specific WANģ. It will show you examples of the most common scenarios like SNAT, route traffic through a specific WAN interface and route traffic through a VPN tunnel.ġ. This Policy Route guide will show you how to handle Routing on a USG/ATP.

Zyxel atp100