ZyXEL Communications 3.1 User Manual

Chapter 8 Route

ZyWALL (ZLD) CLI Reference Guide

[no] tunnel tunnel_name

Sets the incoming interface to an IPSec VPN tunnel. The 

no

 command 

removes the IPSec VPN tunnel through which the incoming packets are 
received.

[no] user user_name

Sets the user name. The no command resets the user name to the 
default (any). any means all users.

policy6 {policy_number | append | insert 

policy_number}

Enters the IPv6 policy-route sub-command mode to configure, add or 
insert a policy. 

[no] bandwidth <1..1048576> priority 

<1..1024> [maximize-bandwidth-usage]

Sets the maximum bandwidth and priority for the policy. The no 
command removes bandwidth settings from the rule. You can also turn 
maximize bandwidth usage on or off.

[no] deactivate

Disables the specified policy. The no command enables the specified 
policy.

[no] description description

Sets a descriptive name for the IPv6 policy. The no command removes 
the name for the policy.

[no] destination {address6_object|any}

Sets the destination IPv6 IP address the matched packets must have. 
The no command resets the destination IP address to the default 
(any). any means all IP addresses.

[no] dscp {any | <0..63>}

Sets a custom DSCP code point (0~63). This is the DSCP value of 
incoming packets to which this policy route applies. any means all 
DSCP value or no DSCP marker.

[no] dscp class {default | dscp_class}

Sets a DSCP class. Use default to apply this policy route to incoming 
packets that are marked with DSCP value 0. Use one of the pre-
defined AF classes (including af11~af13, af21~af23, af31~af33, and 
af41~af43) to apply this policy route to incoming packets that are 
marked with the DSCP AF class. 

The “af” entries stand for Assured Forwarding. The number following 
the “af” identifies one of four classes and one of three drop 
preferences. See 

 for more details.

dscp-marking <0..63>

Sets a DSCP value to have the ZyWALL apply that DSCP value to the 
route’s outgoing packets.

dscp-marking class {default | 

dscp_class}

Sets how the ZyWALL handles the DSCP value of the outgoing packets 
that match this route. Set this to default to have the ZyWALL set the 
DSCP value of the packets to 0. Set this to an “af” class (including 
af11~af13, af21~af23, af31~af33, and af41~af43) which stands for 
Assured Forwarding. The number following the “af” identifies one of 
four classes and one of three drop preferences. See 

 for more details.

no dscp-marking

Use this command to have the ZyWALL not modify the DSCP value of 
the route’s outgoing packets. 

exit

Leaves the sub-command mode.

[no] interface interface_name

Sets the interface on which the matched packets are received. The no 
command resets the incoming interface to the default (any). any 
means all interfaces.

[no] next-hop {auto|gateway gatewayv6  

|interface interface_name |trunk 

trunk_name|tunnel tunnel_name}

Sets the next-hop to which the matched packets are routed. The no 
command resets next-hop settings to the default (auto). 

[no] schedule schedule_object

Sets the schedule. The no command removes the schedule setting to 
the default (none). none means any time.

[no] service {service_name|any}

Sets the IP protocol. The no command resets service settings to the 
default (any). any means all services.

Command Summary: Policy Route (continued)