UAG4100 User’s Guide
213
C
H A P T E R
2 2
Layer 2 Isolation
22.1 Overview
Layer-2 isolation is used to prevent connected devices from communicating with each other in the
UAG’s local network(s), except for the devices in the white list, when layer-2 isolation is enabled on
the UAG and the local interface(s).
Note: Layer-2 isolation only checks the wireless traffic that goes through the UAG
interfaces, including the virtual interfaces and the bridge interface between the 2.4
GHz WLAN and the 5 GHz WLAN. Therefore, traffic between wireless clients using
the same AP and frequency band can’t be blocked. But traffic between wireless
clients in the 2.4 GHz WLAN and 5 GHz WLAN can be blocked even when they are
connected to the same AP.
Note: The firewall must be enabled before you can use layer-2 isolation.
In the following example, layer-2 isolation is enabled on the UAG’s interface Vlan1. A printer, PC
and AP are in the Vlan1. The IP address of network printer (
C
) is added to the white list. With this
setting, the connected AP then cannot communicate with the PC (
D
), but can access the network
printer (
C
), server (
B
), wireless client (
A
) and the Internet.
Figure 139
Layer-2 Isolation Application
22.1.1 What You Can Do in this Chapter
• Use the
General
screen (
) to enable layer-2 isolation on the UAG and
the internal interface(s).
