ZyXEL Communications UAG Series - 27.2.1 Firewall Sub-Commands; 27.2.2 Firewall Command Examples

Chapter 27 Layer 2 Isolation
UAG CLI Reference Guide
154
27.2 Layer 2 Isolation Commands
The following table lists the l2-isolation commands. You must use the configure terminal
command to enter the configuration mode before you can use these commands.
27.2.1 Layer 2 Isolation White List Sub-Commands
The following table describes the sub-commands for l2-isolation white-list commands.
Table 89 l2-isolation Commands
COMMAND DESCRIPTION
l2-isolation Enters the layer 2 isolation sub-command mode to enable Layer-2 isolation
on the UAG and specific internal interface(s).
[no] activate Turns on Layer-2 isolation on the UAG. The
no command disables Layer-2
isolation on the UAG.
[no] interface interface_name Turns on Layer-2 isolation on a specific internal interface. The
no command
disables Layer-2 isolation for the specified interface.
white-list rule_number Enters the layer 2 isolation white list sub-command mode to set a new rule
in the white list. See Table 90 on page 154 for the sub-commands.
rule_number: 1 - N, where N depends on the UAG model.
white-list activate Turns on the white list on the UAG.
IP addresses that are not listed in the white list are blocked from
communicating with other devices in the layer-2-isolation-enabled internal
interface(s) except for broadcast packets.
white-list append Enters the layer 2 isolation white list sub-command mode to add a rule to
the end of the white list. See Table 90 on page 154 for the sub-commands.
white-list flush Removes all rules in the white list.
white-list no activate Turns the white list off.
no l2-isolation activate Disables Layer-2 isolation on the UAG.
no l2-isolation white-list
rule_number
Disables the specified rule in the white list.
rule_number: 1 - N, where N depends on the UAG model.
no l2-isolation white-list activate Turns on the white list on the UAG.
show l2-isolation Displays whether Layer-2 isolation is enabled on an interface.
show l2-isolation activation Displays whether Layer-2 isolation is enabled on the UAG.
show l2-isolation white-list
[rule_number]
Displays all or a specified white list rule settings.
rule_number: 1 - N, where N depends on the UAG model.
show l2-isolation white-list
activation
Displays whether the white list is enabled.
Table 90 l2-isolation white-list Sub-commands
COMMAND DESCRIPTION
[no] activate Enables the rule. The no command disables the rule.