How to Configure VLAN to Access Internet but Isolate from Other VLANs

Zyxel_Emily
Zyxel_Emily Posts: 1,396  Zyxel Employee
Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments
edited July 23 in Networking

Question: 

How can I configure VLAN interface to access the Internet but prevent it from accessing other VLANs?

Answer: 

  • testvlan can access Internet
  • testvlan cannot access other internal subnets

To achieve this configuration for VLAN interface, follow these steps. You don't need to create extra security policy rules.

1. On Nebula, go to Configure > Firewall > Interface > LAN interface.

2. Select the VLAN interface and turn on the option labeled "Guest". For further details, you can refer to this FAQ.

[ATP/FLEX] What does the "guest network" mean in interface?