Configuring the Secondary Bridge Interface

This example uses X0 (automatically assigned to the LAN):

1. Navigate to NETWORK | System > Interfaces.
2. Click the Configure icon in the right column of the X0 (LAN) interface.
3. From IP Assignment, select Layer 2 Bridged Mode.
4. From Bridged to, select the X1 interface.

5. Choose one or more Management options for the interface: HTTPS, Ping (selected by default), SNMP, SSH.

   Selecting HTTPS activates and selects Add rule to enable redirect from HTTP to HTTPS automatically. For more information about HTTP/HTTPS redirection, see HTTP/HTTPS Redirection.

6. Choose User Login options: HTTP, HTTPS.
7. To enable redirect to HTTPS from HTTP, select Add rule to enable redirect from HTTP to HTTPS. For more information about this option, see HTTP/HTTPS Redirection.
8. You can optionally enable Block all non-IPv4 traffic to prevent the L2 bridge from passing non-IPv4 traffic.

9. To control VLAN traffic through the L2 bridge, click VLAN Filtering. By default, all VLANs are allowed:

   • Select Block listed VLANs (blacklist) from the drop-down menu and add the VLANs you wish to block from the left pane to the right pane. All VLANs added to the right pane is blocked, and all VLANs remaining in the left pane are allowed.
   • Select Allow listed VLANs (whitelist) from the drop-down menu and add the VLANs you wish to explicitly allow from the left pane to the right pane. All VLANs added to the right pane are allowed, and all VLANs remaining in the left pane are blocked.
10. Click OK. The Interface Settings table displays the updated configuration:

You can now apply security services to the appropriate zones, as desired. In this example, they should be applied to the LAN, WAN, or both zones.