ZyXEL P-791R v2 Guia Do Utilizador

                                         

•  How to avoid triangle route 

The folloing network topology allows you to avoid triangle route security issues 
when the backup gateway is connected to the LAN. Use IP alias to configure 
the LAN into two or three logical networks with the P-791R v2 itself as the 
gateway for each LAN network. Put the protected LAN in one subnet(Subnet 1 
in the following figure) and the backup gateway in another subnet(Subnet 2). 
Configure filters that allow packets from the protected LAN(Subnet 1) to the 
backup gateway (Subnet 2). 

Traffic redirect LAN setup example 1: 

 

Put all of your network gateways on the WAN side as the following figure 
shows. This ensures that all incoming network traffic passes through your 
P-791R v2 to your LAN. Therefore your LAN is protected. 

Traffic redirect LAN setup example 2: 

 

                                     

63 

All contents copyright © 2007 ZyXEL Communications Corporation.