Digi LR54 User Manual page 298

Wi-Fi
c. Create a firewall filter to provide internet access for the LAN2_isolation_zone.
i. Return to the root config prompt by typing three periods (...):
(config firewall zone LAN2_isolation_zone)> ...
(config)>
ii. Add the new packet filter:
(config)> add firewall filter end
(config firewall filter 2)>
iii. Set the label for the filter:
(config firewall filter 2)> label "Allow LAN2_isolation_zone to
External"
(config firewall filter 2)>
iv. Set the source zone to LAN2_isolation_zone:
(config firewall filter 2)> src_zone LAN2_isolation_zone
(config firewall filter 2)>
v. Set the destination zone to external:
(config firewall filter 2)> dst_zone external
(config firewall filter 2)>
d. Create a firewall filter to drop traffic from the Internal zone (used by the LAN1 interface)
to the LAN2_isolation_zone:
Firewall filters are applied in the order that they are listed. As a result, in order to drop
traffic from the Internal zone to the LAN2_isolation_zone, this filter must be added
before the Allow all outgoing traffic filter, which allows the Internal zone to have access
to any zone. In this example, we will add the new to the first position in the list (index
position 0).
i. Add the new packet filter:
(config firewall filter 2)> add .. 0
(config firewall filter 0)>
ii. Set the label for the filter:
(config firewall filter 0)> label "Drop traffic from Internal to
LAN2_isolation_zone"
(config firewall filter 0>
iii. Set the source zone to internal:
(config firewall filter 0)> src_zone internal
(config firewall filter 0)>
LR54 User Guide
Isolate Wi-Fi clients
298