ZyXEL Communications 3.1 User Manual

 Chapter 8 Route

ZyWALL (ZLD) CLI Reference Guide

[no] dscp {any | <0..63>}

Sets a custom DSCP code point (0~63). This is the DSCP value of 
incoming packets to which this policy route applies. any means all 
DSCP value or no DSCP marker.

[no] dscp class {default | dscp_class}

Sets a DSCP class. Use default to apply this policy route to incoming 
packets that are marked with DSCP value 0. Use one of the pre-
defined AF classes (including af11~af13, af21~af23, af31~af33, and 
af41~af43) to apply this policy route to incoming packets that are 
marked with the DSCP AF class. 

The “af” entries stand for Assured Forwarding. The number following 
the “af” identifies one of four classes and one of three drop 
preferences. See 

 for more details.

dscp-marking <0..63>

Sets a DSCP value to have the ZyWALL apply that DSCP value to the 
route’s outgoing packets.

dscp-marking class {default | 

dscp_class}

Sets how the ZyWALL handles the DSCP value of the outgoing packets 
that match this route. Set this to default to have the ZyWALL set the 
DSCP value of the packets to 0. Set this to an “af” class (including 
af11~af13, af21~af23, af31~af33, and af41~af43) which stands for 
Assured Forwarding. The number following the “af” identifies one of 
four classes and one of three drop preferences. See 

 for more details.

no dscp-marking

Use this command to have the ZyWALL not modify the DSCP value of 
the route’s outgoing packets. 

exit

Leaves the sub-command mode.

[no] interface interface_name

Sets the interface on which the incoming packets are received. The no 
command resets the incoming interface to the default (

any

). 

any

 

means all interfaces.

[no] next-hop {auto|gateway address 

object |interface interface_name 

|trunk trunk_name|tunnel tunnel_name}

Sets the next-hop to which the matched packets are routed. The no 
command resets next-hop settings to the default (

auto

). 

[no] schedule schedule_object

Sets the schedule. The 

no

 command removes the schedule setting to 

the default (

none

). 

none

 means any time.

[no] service {service_name|any}

Sets the IP protocol. The 

no

 command resets service settings to the 

default (

any

). 

any

 means all services.

[no] snat {outgoing-interface|pool 

{address_object}}

Sets the source IP address of the matched packets that use SNAT. The 

no

 command removes source NAT settings from the rule.

[no] source {address_object|any}

Sets the source IP address that the matched packets must have. The 

no

 command resets the source IP address to the default (

any

). 

any

 

means all IP addresses.

[no] sslvpn tunnel_name

Sets the incoming interface to an SSL VPN tunnel. The 

no

 command 

removes the SSL VPN tunnel through which the incoming packets are 
received.

[no] trigger <1..8> incoming 

service_name trigger service_name

Sets a port triggering rule. The 

no

 command removes port trigger 

settings from the rule.

trigger append incoming service_name 

trigger service_name

Adds a new port triggering rule to the end of the list.

trigger delete <1..8>

Removes a port triggering rule.

trigger insert <1..8> incoming 

service_name trigger service_name

Adds a new port triggering rule before the specified number.

trigger move <1..8> to <1..8>

Moves a port triggering rule to the number that you specified. 

Command Summary: Policy Route (continued)