Zyxel ZyWALL 1100 [329/829] Overview

ZyWALL/USG Series User’s Guide

329

CHAPTER 17

Layer 2 Isolation

17.1 Overview

Layer-2 isolation is used to prevent connected devices from communicating with each other in the

ZyWALL/USG’s local network(s), except for the devices in the white list, when layer-2 isolation is

enabled on the ZyWALL/USG and the local interface(s).

Note: The security policy control must be enabled before you can use layer-2 isolation.

In the following example, layer-2 isolation is enabled on the ZyWALL/USG’s interface Vlan1. A

printer, PC and AP are in the Vlan1. The IP address of network printer (C) is added to the white list.

With this setting, the connected AP then cannot communicate with the PC (D), but can access the

network printer (C), server (B), wireless client (A) and the Internet.

Figure 226 Layer-2 Isolation Application

17.1.1 What You Can Do in this Chapter

•Use the General screen (Section 17.2 on page 330) to enable layer-2 isolation on the ZyWALL/

USG and the internal interface(s).

•Use the White List screen (Section 17.3 on page 330) to enable and configures the white list.