Changes

==Access router through hotspot==

==Access router through hotspot==

With this configuration, clients can access only TAP100 WebUI, but can't access router WebUI. This section is about how to make additional configurations so hotspot clients could access router WebUI.  

With the current configuration, clients have access to the TAP100 WebUI but cannot reach the router's WebUI. This section outlines additional steps to enable hotspot clients to access the router's WebUI.

Only thing we need to do to achieve this is to create one firewall rule on router. To do this, navigate on router WebUI to '''Network -> Firewall -> Traffic Rules'''.

To achieve this, we only need to create one firewall rule on the router. Here's how to do it:

Once there, we need to add new instance :  

 

Once there, we need to create new rule with the following details :  

<ol>

<ol>

<li> For Type choose : Add new forward rule</li>

<li> Type : Add new forward rule</li>

<li> For Name : enter any desired name for this instance </li>

<li> Name : Enter any desired name for this rule </li>

<li> For Source Zone choose : hotspot </li>

<li> Source Zone : hotspot </li>

<li> For Destination Zone choose : lan (we are going to change it afterwards)  </li>

<li> Destination Zone : lan (we will modify this later)  </li>

<li> Press "ADD" button  </li>

<li> Press "ADD" button  </li>

</ol>

</ol>

[[File:firewallrule1.png|border|class=tlt-border]]

[[File:firewallrule1.png|border|class=tlt-border]]

After these steps, you will be prompted to pop-up window, in which you need to following :

After completing these steps, a pop-up window will appear, where you need to enter the following details:

 

<ol>

<ol>

<li> For protocol choose : TCP </li>

<li> Protocol: TCP </li>

<li> For destination zone choose : Device (input) </li>

<li> Destination Zone  : Device (input) </li>

<li> For destination port choose : HTTP (80), HTTPS(443)  </li>

<li> Destination Port  : HTTP (80), HTTPS(443)  </li>

<li> Don't forget to enable and save</li>

<li> Don't forget to enable and save it </li>

</ol>

</ol>

[[File:Firewallrule2.png|border|class=tlt-border]]

[[File:Firewallrule2.png|border|class=tlt-border]]

With this firewall rule in present, all clients connected to hotspot will be available to reach router WebUI through router LAN address ( 192.168.5.1 in our case ) and reach TAP100 WebUI through tap100.rutos.net address.

With this firewall rule in place, all clients connected to the hotspot will have access to the router's WebUI using the router LAN address (in our case, 192.168.5.1) and can reach the TAP100 WebUI via the tap100.rutos.net address.