Blocking Internet Access for LAN Clients
Main Page > General Information > Configuration Examples > Router control and monitoring > Blocking Internet Access for LAN Clients
Introduction
This article contains instructions o how to block Internet access for LAN clients using a Teltonika-Networks device.
Blocking WAN (Internet) access
Access between your end device and other networks is controlled by your network device's (router, gateway) firewall. Therefore, in order to set networks access limitations you will need to modify the firewall configuration. In the Teltonika-Networks devices this can be done over the Network → Firewall page.
To access the Firewall page, you must first switch to 'Advanced' WebUI mode:
All clients
- To block all LAN clients from accessing the Internet, go to the Network → Firewall → Traffic Rules page.
- Scroll down to the 'Add New Forward Rule' section and create a rule such as this:
- Create a custom name for the rule.
- Set 'Source Zone' to lan.
- Set 'Destination Zone' to wan.
- Click 'Add'.
- When the rule is created, you will be redirected to its configuration page. While there, set up the rule like this:
- Set 'Protocol' to Any.
- Set 'Action' to Drop.
- If you later wish to undo the changes, you can delete the rule turn it off.
Single client
- To block a single LAN client from accessing the Internet, go to the Network → Firewall → Traffic Rules page.
- Scroll down to the 'Add New Forward Rule' section and create a rule such as this:
- Create a custom name for the rule.
- Set 'Source Zone' to lan.
- Set 'Destination Zone' to wan.
- Click 'Add'.
- When the rule is created, you will be redirected to its configuration page. While there, set up the rule like this:
- Set 'Protocol' to Any.
- Set 'Source address' to the the one that you wish to block.
- Set 'Action' to Drop.
- If you later wish to undo the changes, you can delete the rule turn it off.
