ZyXEL Communications UAG Series - 22.2 Layer 2 Isolation Commands

Chapter 22 Layer 2 Isolation
UAG CLI Reference Guide
138
22.2 Layer 2 Isolation Commands
The following table lists the l2-isolation commands. You must use the configure terminal
command to enter the configuration mode before you can use these commands.
22.2.1 Layer 2 Isolation White List Sub-Commands
The following table describes the sub-commands for l2-isolation white-list commands.
Table 76 l2-isolation Commands
COMMAND DESCRIPTION
l2-isolation Enters the layer 2 isolation sub-command mode to enable Layer-2 isolation
on the UAG and specific internal interface(s).
[no] activate Turns on Layer-2 isolation on the UAG. The
no command disables Layer-2
isolation on the UAG.
[no] interface interface_name Turns on Layer-2 isolation on a specific internal interface. The
no command
disables Layer-2 isolation for the specified interface.
white-list <1..20> Enters the layer 2 isolation white list sub-command mode to set a new rule
in the white list. See Table 77 on page 138 for the sub-commands.
white-list activate Turns on the white list on the UAG.
IP addresses that are not listed in the white list are blocked from
communicating with other devices in the layer-2-isolation-enabled internal
interface(s) except for broadcast packets.
white-list append Enters the layer 2 isolation white list sub-command mode to add a rule to
the end of the white list. See Table 77 on page 138 for the sub-commands.
white-list flush Removes all rules in the white list.
white-list no activate Turns the white list off.
no l2-isolation activate Disables Layer-2 isolation on the UAG.
no l2-isolation white-list <1..20> Disables the specified rule in the white list.
no l2-isolation white-list activate Turns on the white list on the UAG.
show l2-isolation Displays whether Layer-2 isolation is enabled on an interface.
show l2-isolation activation Displays whether Layer-2 isolation is enabled on the UAG.
show l2-isolation white-list
[<1..20>]
Displays all or a specified white list rule settings.
show l2-isolation white-list
activation
Displays whether the white list is enabled.
Table 77 l2-isolation white-list Sub-commands
COMMAND DESCRIPTION
[no] activate Enables the rule. The no command disables the rule.
[no] description description Sets a descriptive name (up to 60 printable ASCII
characters) for a rule. The no command removes the
descriptive name from the rule.
[no] ip-address ip Sets an IPv4 address associated with this rule. The no
command removes the IP address.
This is the IP address of device that can be accessed by the
devices connected to an internal interface on which layer-2
isolation is enabled.