UAG4100 User’s Guide
213
CHAPTER 22
Layer 2 Isolation
22.1 Overview
Layer-2 isolation is used to prevent connected devices from communicating with each other in the
UAG’s local network(s), except for the devices in the white list, when layer-2 isolation is enabled on
the UAG and the local interface(s).
Note: Layer-2 isolation only checks the wireless traffic that goes through the UAG
interfaces, including the virtual interfaces and the bridge interface between the 2.4
GHz WLAN and the 5 GHz WLAN. Therefore, traffic between wireless clients using
the same AP and frequency band can’t be blocked. But traffic between wireless
clients in the 2.4 GHz WLAN and 5 GHz WLAN can be blocked even when they are
connected to the same AP.
Note: The firewall must be enabled before you can use layer-2 isolation.
In the following example, layer-2 isolation is enabled on the UAG’s interface Vlan1. A printer, PC
and AP are in the Vlan1. The IP address of network printer (C) is added to the white list. With this
setting, the connected AP then cannot communicate with the PC (D), but can access the network
printer (C), server (B), wireless client (A) and the Internet.
Figure 139 Layer-2 Isolation Application
22.1.1 What You Can Do in this Chapter
•Use the General screen (Section 22.2 on page 214) to enable layer-2 isolation on the UAG and
the internal interface(s).
To Next Page
Loading...
