User's Manual

Network > Routing
229
SonicOS Enhanced 4.0 Administrator Guide
You can enter the policy number (the number listed before the policy name in the # Name
column) in the Items field to move to a specific routing policy. The default table configuration
displays 50 entries per page. You can change this default number of entries for tables on the
System > Administration page.
You can sort the entries in the table by clicking on the column header. The entries are sorted
by ascending or descending order. The arrow to the right of the column entry indicates the
sorting status. A down arrow means ascending order. An up arrow indicates a descending
order.
A Route Policy Example
The following example walks you through creating a route policy for two simultaneously active
WAN interfaces. For this example, a secondary WAN interface needs to be setup on the OPT
interface and configured with the settings from your ISP. Next, configure the security appliance
for load balancing by checking the Enable Load Balancing on the
Network > WAN Failover & LB page. For this example, choose Per Connection Round-
Robin as the load balancing method in the Network > WAN Failover & LB page. Click Apply
to save your changes on the Network > WAN Failover & LB page.
Step 1 Click the Add button under the Route Policies table. The Add Route Policy window is
displayed.
Step 2 Create a routing policy that directs all LAN Subnet sources to Any destinations for HTTP
service out of the Default Gateway via the WAN interface by selecting these settings from the
Source, Destination, Service, Gateway and Interface menus respectively. Use the default 1
in the Metric field and enter force http out primary into the Comment field. Click OK.
Step 3 Create a second routing policy that directs all LAN Subnet sources to Any destinations for
Telnet service out of the Secondary Default Gateway via the Opt interface by selecting these
settings from the Source, Destination, Service, Gateway and Interface menus respectively.
Use the default 1 in the Metric field and enter force telnet out backup into the Comment field.
Click OK.
These two policy-based routes force all sources from the LAN subnet to always go out the
primary WAN when using any HTTP-based application, and forces all sources from the LAN
subnet to always go out the backup WAN when using any Telnet-based application.
To test the HTTP policy-based route, from a computer attached to the LAN interface, access
the public Web site http://www.whatismyip.com and http://whatismyip.everdot.org. Both sites
display the primary WAN interface’s IP address and not the secondary WAN interface.