Zones and L2

Goal

Build Layer‑2 foundations: security zones, physical/logical interfaces, VLANs, and bridges.

Prerequisites

• network.read / network.write.
• Network firewall overview.

Steps

1. Open Network → L2.
2. Create a zone (for example lan, wan, dmz) with a clear name and description.
3. Create interfaces and assign each to a zone. Set kind, MTU, admin-up, and optional parent/MAC as needed.
4. Add VLAN subinterfaces (name, VLAN id, parent interface, optional zone).
5. Create bridges and list member interfaces (comma-separated in the form).
6. Publish from Overview when ready for appliances to apply.

Tips

• Zone names are referenced by firewall rules—keep them stable.
• Bridges rely on the kernel datapath for MAC learning; ShieldGate stores membership and desired state.
• Disable unused interfaces instead of deleting them mid-change when you need a quick rollback path.

Verify

• Zones and interfaces appear under L2.
• After publish, appliance apply status (Monitor) shows success for L2 objects (Linux datapath) or Mock reconcile.

Related

• Addresses and routing
• Firewall rules