disable-interface-isolation

This command controls interface isolation.

Syntax

disable-interface-isolation { on | off }

Parameters

on: Enables interface-isolation.
off: Disables interface-isolation. This setting is the default value.

Guidelines

The disable-interface-isolation command controls whether to allow interface isolation. By default the appliance refuses to accept a packet on an interface other than the one bound to the destination address of the packet. As a security policy, the interface that receives a packet must be configured with the IP address that is the destination address of the packet. Enabling interface isolation relaxes the restriction.

Example

Allow any interface on the same subnet to accept a packet.

# disable-interface-isolation on