beautypg.com

Gateways on the wan side, Configuring triangle route via commands – ZyXEL Communications Internet Security Appliance ZyWALL5UTM 4.0 User Manual

Page 720

background image

ZyWALL 5/35/70 Series User’s Guide

Appendix I Triangle Route

720

Figure 454 IP Alias

Gateways on the WAN Side

A second solution to the “triangle route” problem is to put all of your network gateways on the
WAN side as the following figure shows. This ensures that all incoming network traffic passes
through your ZyWALL to your LAN. Therefore your LAN is protected.

Figure 455 Gateways on the WAN Side

Configuring Triangle Route via Commands

1 From the SMT main menu, enter 24.

2 Enter “8” in menu 24 to enter CI command mode.

3 Use the following command to allow triangle route:

sys firewall ignore triangle all on

or this command to disallow triangle route:

sys firewall ignore triangle all off