To meet the requirements of network architecture security, different services or network segments are classified into different levels of security, and different security zones are defined based on different security levels.

When defining zones, carry out planning according to control requirements. Bind one interface to one zone, or bind several interfaces with the same requirements to one zone. A local Zone is a logical concept that can be divided into Layer 2 zones, Layer 3 zones, and virtual wire zones according to the forwarding types.

• Layer 2 zones: Only layer 2 interfaces and mirror interfaces can be selected.

• Layer 3 zones: All layer 3 interfaces can be selected, including routing interfaces, subinterfaces, and VLAN interfaces.

• Virtual wire zones: Only virtual wire interfaces can be selected.

Click Add to create a zone, as shown in the following figure.

Type: Select Layer 2, Layer 3, or Virtual wire according to different deployment modes.