How do I configure policy-based routing in QuWAN Orchestrator?
Applicable Products
- QuWAN Orchestrator 2.7.0 and later
- QuRouter 2.5.0 and later
- QuWAN vRouter Edition 2.7.0 and later
Overview
QuRouter, vRouter and QuWAN start supporting policy routing to meet common usage scenarios where traffic is directed to a specified interface since QuRouter v2.5.0 and later, vRouter v2.7.0 and later, and QuWAN v2.7.0 and later.
Policy-based routing (PBR) offers advanced traffic control by allowing you to define routing paths based on specific traffic attributes. Unlike traditional routing, which determines paths solely based on destination IP addresses, PBR provides flexibility to customize routes using multiple criteria.
Rule priority in policy-based routing
When configuring routing rules, it is important to understand the order of priority among different routing mechanisms. The system applies rules in the following order of precedence:
- Firewall rules
- Policy-based routing rules
- Static routes
- Quality of Service (QoS) rules
- Default routes
This priority ensures that specific, security-related configurations (such as firewall rules) are enforced before broader routing rules.
Key features
- Customizable routing criteria
You can define routing paths based on factors such as source IP address, destination IP address, protocol type, packet size, port number, or user-defined tags. - Enhanced traffic control
PBR allows you to manage network traffic with greater precision, ensuring efficient routing strategies tailored to your requirements.
Common use cases
1.Multi-line fault tolerance
Assign specific traffic types to backup connections, improving network reliability during outages.
Use case: A logistics company relies on its network to transmit real-time shipment data from LAN interface port 5 to an external server at 203.0.113.10. To ensure uninterrupted communication, they configure a primary route that directs traffic through the next hop 192.168.1.1.
If this route becomes unavailable, a backup route automatically takes over, allowing traffic from 203.0.113.10 to be forwarded through the next hop 192.168.2.1. This setup ensures continuous data transmission, preventing disruptions in critical logistics operations.
2.Application-based prioritization
Route latency-sensitive traffic of specific sources, such as video conferencing and voice calls, through optimized paths, while less critical traffic uses alternative routes.
Use case: A software development company uses LAN interface port 5 to handle video conferencing and voice call traffic. To ensure stable call quality, they configure application-based routing rules. Latency-sensitive traffic, such as calls, is prioritized and routed through optimized low-latency paths. Meanwhile, less critical traffic, like file uploads or general browsing, is redirected to alternative routes, ensuring high-quality communication for important meetings.
For example, suppose a development team uses the LAN interface port 5 to handle voice and video traffic. The traffic, such as SIP and RTP packets for voice and video calls, originates from the IP address 192.168.20.10. This traffic is routed through a low-latency optimized path using the gateway 192.168.1.1, ensuring that the calls and video conferencing experience high-quality communication with minimal delay.
On the other hand, less critical traffic, like file uploads and general browsing originating from the same device, is sent through a different path, using a standard route with a gateway at 192.168.2.1. This separation ensures that non-critical traffic does not interfere with important communication tasks.
3.Localized traffic management
Apply distinct routing rules for traffic sending to specific regions or IP segments to meet organizational or regional needs.
Use case: An enterprise with global operations requires efficient routing for traffic between its locations. Traffic from the IP segment 192.168.1.1/24, destined for a US office network, follows a specific routing rule to ensure optimized paths that meet organizational and regional requirements, improving connectivity and performance.
For example, traffic from a US office device (192.168.1.10) is routed locally via the next hop 10.1.1.1 for quick and reliable communication.
However, traffic from the same device to a server in the Europe office (192.0.2.10) takes a different route through the next hop 10.1.1.1, ensuring efficient international routing while maintaining optimized local traffic flow.
PBR is particularly important in enterprise networks, data centers, and environments with multiple connections, providing unmatched flexibility to optimize network performance and meet diverse traffic management requirements.
Procedure
- Log in to QuWAN Orchestrator.
- Select your organization.
- Click QuWAN Device.
- Click a QuWAN device.
- Click Policy-based Route.

- Click Add.
The Add Rule window appears. - Select Enable Rule to activate the policy-based rule once the settings are configured.
- Enter a name for the rule.
- Optional: Enter a description for the rule.
- Configure the routing criteria settings.
Setting User Action Protocol Specify the type of network traffic that the rule applies to, with options to configure port numbers for precise control. - Any: Apply the rule to all protocols without specifying ports.
- TCP+UDP: Apply the rule to both TCP and UDP traffic between the specified source and destination.
- TCP: Apply the rule to only TCP traffic between the specified source and destination.
- UDP: Apply the rule to only UDP traffic between the specified source and destination.
Source - Define where the traffic originates from, such as a specific IP address, LAN interface, or VPN server.
- Any: Apply the rule to all incoming traffic regardless of the source.
- LAN Interface: Apply the rule to traffic originating from a LAN interface.
- VPN Server: Apply the rule to traffic originating from a VPN server.
- IP Address: Apply the rule to a specific IP address.
Click Add to enter a new IP address and then click the save icon to save the entry.
- Optional: Specify a port number between 1 and 65535.
- This field appears if you select TCP+UDP, TCP, or UDP as the protocol.
- If left blank, the system applies the setting to all ports.
- You can add up to 15 port numbers, separating them with commas (,) and without spaces.
Destination - Select the target of the traffic, such as any destination, a specific domain, a geographic region, or an IP address.
- Any: Apply the rule to all destinations without restriction.
- Domain: Apply the rule to traffic going to specific domains.
Click Add to enter a new domain address and then click the save icon to save the entry.
- Geolocation IP: Apply the rule to destinations based on geographic locations.
- IP Address: Apply the rule to a specific IP address.
Click Add to enter a new IP address and then click the save icon to save the entry.
- Optional: Specify a port number between 1 and 65535.
- This field appears if you select TCP+UDP, TCP, or UDP as the protocol.
- If left blank, the system applies the setting to all ports.
NoteThe system may show devices as available, even when compatible devices are not present. This behavior is by design.
- Specify the next hop in your policy routes to direct traffic to the correct device or interface.
- WAN Interface: Direct traffic to an external network via a WAN connection. You can use the WAN interface for general internet-bound traffic or when routing to an ISP.
Optional: Select Enable fallback to allow the WAN interface to automatically switch to a backup connection if the primary link fails. - VPN Tunnel: Forward traffic through a specific VPN tunnel for secure, encrypted communication. Ideal for private inter-site connectivity or remote access.
- Route-based VPN: Route traffic through a route-based VPN, which uses routing tables for dynamic and scalable secure communications between networks.
- IP Address: Direct traffic to the specified IP address.
- WAN Interface: Direct traffic to an external network via a WAN connection. You can use the WAN interface for general internet-bound traffic or when routing to an ISP.
- Click Apply.
QuWAN Orchestrator adds the policy-based routing rule.