Digi TX54 User Manual page 272

Wi-Fi
ii. Set the label for the filter:
(config firewall filter 0)> label "Drop traffic from Internal to
LAN2_isolation_zone"
(config firewall filter 0>
iii. Set the source zone to internal:
(config firewall filter 0)> src_zone internal
(config firewall filter 0)>
iv. Set the destination zone to LAN2_isolation_zone:
(config firewall filter 0)> dst_zone LAN2_isolation_zone
(config firewall filter 0)>
v. Set the filter to drop traffic between the zones:
(config firewall filter 0)> action drop
(config firewall filter 0)>
5. Create a new LAN:
By default, the TX54 device comes with one preconfigured LAN, which includes the default
access point (or, for dual-Wi-Fi models, both default access points). We will use that LAN for
the default access point (or, for dual-Wi-Fi models, the Digi AP (Wi-Fi) access point), and
create a new LAN for the second access point.
a. Return to the root config prompt by typing three periods (...):
(config firewall filter 0)> ...
(config)>
b. Add the new LAN:
(config)> add network interface LAN2
(config network interface LAN2)>
c. Set the device to the new Wi-Fi access point or, for dual-Wi-Fi models, if you are using
both of the preconfigured access points rather than creating a new access point, set the
device to digi_ap2:
(config network interface LAN2)> device /network/wifi/ap/new_AP
(config network interface LAN2)>
d. Set the zone to LAN2_isolation_zone:
(config network interface LAN2)> zone LAN2_isolation_zone
(config network interface LAN2)>
e. Set the IP address and subnet mask of the LAN:
(config network interface LAN2)> ipv4 address address/mask
(config network interface LAN2)>
TX54 User Guide
Isolate Wi-Fi clients
272