Digi IX20-WAG4 User Manual page 219

Wi-Fi
to any zone. In this example, we will add the new to the first position in the list (index
position 0).
i. Add the new packet filter:
(config firewall filter 1)> add .. 0
(config firewall filter 0)>
ii. Set the label for the filter:
(config firewall filter 0)> label "Drop traffic from Internal to
LAN2_isolation_zone"
(config firewall filter 0>
iii. Set the source zone to internal:
(config firewall filter 0)> src_zone internal
(config firewall filter 0)>
iv. Set the destination zone to LAN2_isolation_zone:
(config firewall filter 0)> dst_zone LAN2_isolation_zone
(config firewall filter 0)>
v. Set the filter to drop traffic between the zones:
(config firewall filter 0)> action drop
(config firewall filter 0)>
5. Create a new LAN:
By default, the IX20W device comes with one preconfigured LAN, which includes the default
access point. We will use that LAN for the default access point, and create a new LAN for the
second access point.
a. Return to the root config prompt by typing three periods (...):
(config firewall filter 0)> ...
(config)>
b. Add the new LAN:
(config)> add network interface LAN2
(config network interface LAN2)>
c. Set the device to the new Wi-Fi access point:
(config network interface LAN2)> device /network/wifi/ap/new_AP
(config network interface LAN2)>
d. Set the zone to LAN2_isolation_zone:
(config network interface LAN2)> zone LAN2_isolation_zone
(config network interface LAN2)>
IX20 User Guide
Isolate Wi-Fi clients
219