Digi TX40 User Manual page 337

Wi-Fi
i. Add the new packet filter:
(config firewall filter 2)> add .. 0
(config firewall filter 0)>
ii. Set the label for the filter:
(config firewall filter 0)> label "Drop traffic from Internal to
LAN2_isolation_zone"
(config firewall filter 0>
iii. Set the source zone to internal:
(config firewall filter 0)> src_zone internal
(config firewall filter 0)>
iv. Set the destination zone to LAN2_isolation_zone:
(config firewall filter 0)> dst_zone LAN2_isolation_zone
(config firewall filter 0)>
v. Set the filter to drop traffic between the zones:
(config firewall filter 0)> action drop
(config firewall filter 0)>
5. Create a new LAN:
By default, the TX40 device comes with one preconfigured LAN, which includes the default
access points. We will use that LAN for the Digi AP (Wi-Fi1) access point, and create a new LAN
for the Digi AP (Wi-Fi2) access point. In this step, we create a new LAN for the Digi AP (Wi-Fi2)
access point; in the next step, we will remove the Digi AP (Wi-Fi2) access point from the
default bridge (and thus from the default LAN).
a. Return to the root config prompt by typing three periods (...):
(config firewall filter 0)> ...
(config)>
b. Add the new LAN:
(config)> add network interface LAN2
(config network interface LAN2)>
c. Set the device to digi_ap2:
(config network interface LAN2)> device /network/wifi/ap/digi_ap2
(config network interface LAN2)>
d. Set the zone to LAN2_isolation_zone:
(config network interface LAN2)> zone LAN2_isolation_zone
(config network interface LAN2)>
TX40 User Guide
Isolate Wi-Fi clients
337