Zywall USG 40 - configure only LAN ( NO INTERNET) to access point WIFI

Planetech

Hi, excuse me for my english...
how can I configure Zywall USG 40 for set WIFI Clients with no INTERNET, but they must print or read share folders in LAN.

PeterUK

Do you have the USG40W ? or is wireless done by another device?

By default their is a rule to allow LAN1 to WAN their are may way you can limit given devices to not have internet. best thing to do is by DHCP to reserve the IP for given devices make a group of the IP's then a rule to block from LAN1 to WAN.   

Planetech

Wireless is done by a Zyxel NWA1123-AC PRO.
If I connect access point in LAN 2 port and then I create a Rule to block LAN2 to WAN ....is correct?
I need configure VLAN or not?
Thanks

Zyxel_Emily

Hi @Planetech,

If the access point is connected in LAN2, add a security policy rule to block LAN2 to WAN.

From: LAN2

To: WAN

Action: deny

Log: log/log alert

Planetech

thanks..in this case traffic between LAN1 and LAN2 is allow? I need this..
Next week I'll try this configuration to my office. thanks.

Zyxel_Emily

Hi @Planetech,

Traffic is allowed between LAN2 and LAN1 because of security policy rule #2 and #3.

Remember to add the new policy “From LAN2 to WAN, deny” in rule #1.