You do not have to create any firewall rules to protect the LAN(local area network) from the Authentication network. The DSA-3100has a default firewall rule that blocks all traffic from passingfrom the Authentication network to the LAN.