1. Load-Balance/Route Policy Advanced Routing

2. Outline How does it Work – When matching criteria, send via the route What does it Do – 2 real usage examples Trouble Shooting – Ping / Trace Route Application Note

3. How does it Work (1/3) Set criteria – Protocol – Source IP – Destination IP – Destination Port Set the route – Interface – Gateway – NAT or Routing

4. How does it Work (2/3) Protocol – TCP – UDP – ICMP Source IP Destination IP Destination Port

5. Interface – WAN/Virtual WAN – LAN – VPN Gateway – Default – Specified Do NAT or Routing – NAT is not applicable for LAN and VPN How does it Work (3/3)

6. What does it Do Choose VPN tunnel for certain destinations (Jump) – Surf facebook – Watch Netflix Choose WAN interface for certain destinations – WAN1 for Public VoIP and data, NAT – WAN5 for Private VoIP, Routing

7. VPN to Remote Server Scenario Find the Destination IP Range Configuration Confirm the Routing

8. Scenario Go via VPN tunnel for Netflix and facebook

9. Find the Destination IP Range ping / nslookup whois

10. Configuration Dest IP Interface

11. Confirm the Routing Use tracert / traceroute to confirm routing – First hop: LAN gateway – Second hop: VPN gateway

12. WAN5 for Private VoIP Scenario Rules Overview Configuration – Public server via WAN1 – DNS via WAN1 – Private server via WAN5 Confirm the Routing

13. Scenario LAN1 for PC LAN2 for IP Phones Data via WAN1 VoIP to public server via WAN1 – DNS lookup may be required VoIP to private server via WAN5

14. Rules Overview VoIP to public server via WAN1, NAT DNS lookup via WAN1 VoIP to private server via WAN5, routing Unspecified traffics go via WAN1 (data)

15. External Server via WAN1 Source IP – IP phones Dest IP – Iptel.org Interface – WAN1 Force NAT

16. DNS via WAN1 DNS – UDP 53 Interface – WAN1 Force NAT

17. Private Server via WAN5 Source IP – IP phones Dest IP – Any except iptel Interface – WAN5 Routing

18. Confirm the Routing LAN1 PC tracert / traceroute to 8.8.8.8 LAN2 IP phone tracert / traceroute to 8.8.8.8 LAN2 IP phone traceroute to another IP phone

19. Trouble Shooting Use ping / tracert to confirm the routing Respect the first matched rule Ignore the rests Firewall > Inter-LAN routing > Load- Balance/Route Policy > Static Route

20. Application Note How to use Load-Balance/Route Policy? – http://www.draytek.com.tw/index.php?option=com_k2&view=item&id=5181&Itemid=293&lang=en http://www.draytek.com.tw/index.php?option=com_k2&view=item&id=5181&Itemid=293&lang=en