Re: subnet isolation

It may just be easier to enter 's CLI commands one by one followed by a commit and save.

configure
set firewall name PROTECT_LAN default-action accept
set firewall name PROTECT_LAN rule 1 action drop
set firewall name PROTECT_LAN rule 1 description 'Block packets to .2.0/24'
set firewall name PROTECT_LAN rule 1 destination address 192.168.2.0/24
set firewall name PROTECT_LAN rule 1 state new enable
set interfaces ethernet eth1 firewall in name PROTECT_LAN
commit; save