Applying Firewall Policy To The Zone Of Vlans - ZyXEL Communications ZYWALL 1050 Support Notes

ZyWALL 1050/ZyWALL USG 300 Support Notes
The CLI commands to join VLAN10 to the Zone:
[0] zone Secret
[1] no block
[2] interface vlan10
[3] exit

3.3.3 Applying firewall policy to the Zone of VLANs

Security policy can be enforced between Zones in ZyWALL 1050/ZyWALL USG 300.
Since we have just created three new Zones on port GE1, we can apply some security policies
between these Zones. For example, if you do not allow users in the Finance Zone to have an
access to users or devices in the Secret Zone, you can apply a firewall rule to do so. Moreover,
if you want to allow users in Secret Zone to access users or devices located in the
LAN_VLAN20 Zone, you can apply another firewall rule to do so.
To create those two rules, please follow the configuration steps as stated below:
1) Login the ZyWALL 1050/ZyWALL USG 300 GUI and go to Configuration > Policy >
Firewall. Check "Enable Firewall" to activate your Firewall. Then pick your Zone pairs and
click the "+" icon to create a new firewall rule especially for your selected pair. For example,
first we want to block the access from Finance Zone to Secret Zone, we pick Finance Zone on
the left and Secret Zone on the right.
266
All contents copyright (c) 2007 ZyXEL Communications Corporation.