31,703
edits
Changes
Blocking Internet Access for LAN Clients (view source)
Revision as of 15:06, 10 July 2020
, 15:06, 10 July 2020no edit summary
Access between your end device and other networks is controlled by your network device's (router, gateway) firewall. Therefore, in order to set networks access limitations you will need to modify the firewall configuration. In the Teltonika-Networks devices this can be done over the <b>Network → Firewall</b> page.
Access between your end device and other networks is controlled by your network device's (router, gateway) firewall. Therefore, in order to set networks access limitations you will need to modify the firewall configuration. In the Teltonika-Networks devices this can be done over the <b>Network → Firewall</b> page.
----
----
<ul>
<ul>
<li>To block all LAN clients from accessing the Internet, go to the <b>Network → Firewall → Traffic Rules</b> page.</li>
<li>First, go to the <b>Network → Firewall → Traffic Rules</b> page.</li>
<li>Scroll down to the 'Add New Forward Rule' section and create a rule such as this:
<li>Scroll down to the 'Add New Forward Rule' section and create a rule such as this:
<ol>
<ol>
</ol>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_1.png|border|class=tlt-border]]
</ol>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_1.png|border|class=tlt-border]]
</li>
</li>
<li>When the rule is created, you will be redirected to its configuration page. While there, set up the rule like this:
</ul>
===All clients===
----
<ul>
<li>To block all LAN clients from accessing the Internet, set up the rule like this:
<ol>
<ol>
<li>Set 'Protocol' to <i>Any</i>.</li>
<li>Set 'Protocol' to <i>Any</i>.</li>
</ul>
</ul>
===Single client===
===Single client or range of clients===
----
----
<ul>
<ul>
<li>To block a single LAN client from accessing the Internet, go to the <b>Network → Firewall → Traffic Rules</b> page.</li>
<li>To block a single LAN client from accessing the Internet, set up the rule like this:
<ol>
<ol>
<li>Set 'Protocol' to <i>Any</i>.</li>
<li>Set 'Source Zone' to <i>lan</i>.</li>
<li>Set 'Source address' to the the one that you wish to block.</li>
<li>Set 'Destination Zone' to <i>wan</i>.</li>
<li>Set 'Action' to <i>Drop</i>.</li>
<li>Click 'Add'.</li>
</ol>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_4.png|border|class=tlt-border]]
</ol>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_1.png|border|class=tlt-border]]
</li>
</li>
<li>When the rule is created, you will be redirected to its configuration page. While there, set up the rule like this:
<li>Alternatively, you can specify an IP address/netmask combination to include a range of addresses. For example, specifying <i>192.168.1.100/30</i> as the 'Source address' would denote a range of 192.168.1.100 to 192.168.1.103.<br>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_5.png|border|class=tlt-border]]</li>
<li>If you later wish to undo the changes, you can delete the rule or turn it off.<br>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_3.gif|border|class=tlt-border]]</li>
</ul>
===Blocking a specific IP or network===
----
<ul>
<li>To block all LAN clients from accessing specific IP address, set up the rule like this:
<ol>
<ol>
<li>Set 'Protocol' to <i>Any</i>.</li>
<li>Set 'Protocol' to <i>Any</i>.</li>
<li>Set 'Source address' to the the one that you wish to block.</li>
<li>Set 'Destination address' to the the one that you wish to block.</li>
<li>Set 'Action' to <i>Drop</i>.</li>
<li>Set 'Action' to <i>Drop</i>.</li>
</ol>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_4.png|border|class=tlt-border]]
</ol>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_8.png|border|class=tlt-border]]
</li>
</li>
<li>Alternatively, you can specify an IP address/netmask combination to include a range of addresses. For example, specifying <i>192.168.1.100/30</i> as the 'Source address' would include IP addresses from 192.168.1.100 to 192.168.1.103.<br>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_5.png|border|class=tlt-border]]</li>
<li>Alternatively, you can specify an IP address/netmask combination to include a range of addresses. For example, specifying <i>10.0.0.0/8</i> as the 'Destination address' would denote a range of 10.0.0.0 to 10.255.255.255<br>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_9.png|border|class=tlt-border]]</li>
<li>If you later wish to undo the changes, you can delete the rule or turn it off.<br>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_3.gif|border|class=tlt-border]]</li>
<li>If you later wish to undo the changes, you can delete the rule or turn it off.<br>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_3.gif|border|class=tlt-border]]</li>
</ul>
</ul>
==Blocking specific site or network==
==Blocking a specific site(s)==
<ul>
<ul>
<li>Turn Web Filter on.</li>
<li>Turn Web Filter on.</li>
<li>Set 'Mode' to <i>Blacklist</i>.</li>
<li>Set 'Mode' to <i>Blacklist</i>.</li>
</ol>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_6.png|border|class=tlt-border]]
</ol>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_6.png|border|class=tlt-border]]<br>Alternatively, you can set 'Mode' to <i>Whitelist</i> to allow access only to specific sites and block access to all others.
</li>
<li>Specify sites that you wish to block under the 'Site Blocking Rules' section.
<li>Specify sites that you wish to block under the 'Site Blocking Rules' section.
<ol>
<ol>
<li>Click 'Add' to create a new entry in the list.</li>
<li>Click 'Add' to create a new entry in the list. You may add as many entries as you wish.</li>
<li>Specify a 'Hostname' that you wish to block.</li>
<li>Specify a 'Hostname' that you wish to block.</li>
<li>Don't forget to save the changes.</li>
<li>Don't forget to save the changes.</li>
