ZyXEL Communications UAG Series, Reference Manual

Page: 155 / 361

Chapter 27 Layer 2 Isolation
UAG CLI Reference Guide
155
27.3 Layer 2 Isolation Commands Example
The following example enables Layer-2 isolation on the UAG and interface lan2. It also creates a
rule in the white list to allow access to the device with IP address 172.17.0.66. It then displays the
Layer-2 isolation settings.
[no] description description
Sets a descriptive name (up to 60 printable ASCII
characters) for a rule. The
no
command removes the
descriptive name from the rule.
[no] ip-address ip
Sets an IPv4 address associated with this rule. The
no
command removes the IP address.
This is the IP address of device that can be accessed by the
devices connected to an internal interface on which layer-2
isolation is enabled.
Table 90
l2-isolation white-list Sub-commands (continued)
COMMAND DESCRIPTION
Router# configure terminal
Router(config)# l2-isolation
Router(l2-isolation)# activate
Router(l2-isolation)# interface lan2
Router(l2-isolation)# white-list 1
Router(white-list)# activate
Router(white-list)# description PC
Router(white-list)# ip-address 172.17.0.66
Router(white-list)# exit
Router(config)# show l2-isolation
interface
===============================================================================
lan2
Router(config)# show l2-isolation activation
Layer2 Isolation Status: yes
Router(config)# show l2-isolation white-list
layer2 isolation white list rule: 1
active: yes
ip address: 172.17.0.66
description: PC
Router(config)#