config system zone

Configure zones to group two or more interfaces. When a zone is created you can configure policies for the zone instead of individual interfaces in the zone.

config system zone
    Description: Configure zones to group two or more interfaces. When a zone is created you can configure policies for the zone instead of individual interfaces in the zone.
    edit <name>
        set description {string}
        set interface <interface-name1>, <interface-name2>, ...
        set intrazone [allow|deny]
        set name {string}
        config tagging
            Description: Config object tagging.
            edit <name>
                set name {string}
                set category {string}
                set tags <name1>, <name2>, ...
            next
        end
    next
end

config system zone

Parameter	Description	Type	Size	Default
description	Description.	string	Not Specified
interface <interface-name>	Add interfaces to this zone. Interfaces must not be assigned to another zone or have firewall policies defined. Select interfaces to add to the zone.	string	Maximum length: 79
intrazone	Allow or deny traffic routing between different interfaces in the same zone.	option	-	deny
	Option Description allow Allow traffic between interfaces in the zone. deny Deny traffic between interfaces in the zone.
name	Zone name.	string	Not Specified

config tagging

Parameter	Description	Type	Size	Default
name	Tagging entry name.	string	Not Specified
category	Tag category.	string	Not Specified
tags <name>	Tags. Tag name.	string	Maximum length: 79