ZyXEL Communications ZyWALL USG Series, Reference Manual

Page: 162 / 426

Chapter 24 Layer 2 Isolation
ZyWALL / USG (ZLD) CLI Reference Guide
162
24.3 Layer 2 Isolation Commands Example
The following example enables Layer-2 isolation on the ZyWALL / USG and interface lan2. It also
creates a rule in the white list to allow access to the device with IP address 172.17.0.66. It then
displays the Layer-2 isolation settings.
[no] description description
Sets a descriptive name (up to 60 printable ASCII
characters) for a rule. The
no
command removes the
descriptive name from the rule.
[no] ip-address ip
Sets an IPv4 address associated with this rule. The
no
command removes the IP address.
This is the IP address of device that can be accessed by the
devices connected to an internal interface on which layer-2
isolation is enabled.
Table 83
l2-isolation white-list Sub-commands (continued)
COMMAND DESCRIPTION
Router# configure terminal
Router(config)# l2-isolation
Router(l2-isolation)# activate
Router(l2-isolation)# interface lan2
Router(l2-isolation)# white-list 1
Router(white-list)# activate
Router(white-list)# description PC
Router(white-list)# ip-address 172.17.0.66
Router(white-list)# exit
Router(config)# show l2-isolation
interface
===============================================================================
lan2
Router(config)# show l2-isolation activation
Layer2 Isolation Status: yes
Router(config)# show l2-isolation white-list
layer2 isolation white list rule: 1
active: yes
ip address: 172.17.0.66
description: PC
Router(config)#