To meet the requirements of network architecture security, different services or network segments are classified into different levels of security, and different security zones are defined based on different security levels.

When defining zones, carry out planning according to control requirements. Bind one interface to one zone, or bind several interfaces with the same requirements to one zone. A local “Zone” is a logical concept, which can be divided into Layer 2 zones, Layer 3 zones, and virtual wire zones according to the forwarding types.

• Layer 2 zones: Only transparent interfaces and mirror interfaces can be selected.

• Layer 3 zones: All routing interfaces can be selected, including routing interfaces, subinterfaces, and VLAN interfaces.

• Virtual wire zones: Only virtual cable interfaces can be selected.

Click Add to create a zone, as shown in the following figure.

Type: Select Layer 2, Layer 3, or Virtual wire according to different deployment modes.