Layer 2 Isolation; Chapter 22 Layer 2 Isolation; Overview; What You Can Do In This Chapter - ZyXEL Communications UAG2100 User Manual

22.1 Overview

Layer-2 isolation is used to prevent connected devices from communicating with each other in the
UAG's local network(s), except for the devices in the white list, when layer-2 isolation is enabled on
the UAG and the local interface(s).
Note: Layer-2 isolation only checks the wireless traffic that goes through the UAG
interfaces, including the virtual interfaces and the bridge interface between the 2.4
GHz WLAN and the 5 GHz WLAN. Therefore, traffic between wireless clients using
the same AP and frequency band can't be blocked. But traffic between wireless
clients in the 2.4 GHz WLAN and 5 GHz WLAN can be blocked even when they are
connected to the same AP.
Note: The firewall must be enabled before you can use layer-2 isolation.
In the following example, layer-2 isolation is enabled on the UAG's interface Vlan1. A printer, PC
and AP are in the Vlan1. The IP address of network printer (C) is added to the white list. With this
setting, the connected AP then cannot communicate with the PC (D), but can access the network
printer (C), server (B), wireless client (A) and the Internet.
Figure 131 Layer-2 Isolation Application

22.1.1 What You Can Do in this Chapter

• Use the General screen
the internal interface(s).
C
HAPTER
(Section 22.2 on page 208) to enable layer-2 isolation on the UAG and
UAG2100 User's Guide
207

Layer 2 Isolation

2 2