1,108
edits
Changes
Blocking Internet Access for LAN Clients (view source)
Revision as of 10:30, 19 May 2023
, 10:30, 19 May 2023no edit summary
<li>Set 'Destination Zone' to <i>wan</i>.</li>
<li>Set 'Destination Zone' to <i>wan</i>.</li>
<li>Click 'Add'.</li>
<li>Click 'Add'.</li>
</ol>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_1.png|border|class=tlt-border]]
</ol>[[File:New rule traffic rule Block LAN.png|border|class=tlt-border]]
</li>
</li>
</ul>
</ul>
<li>Set 'Protocol' to <i>Any</i>.</li>
<li>Set 'Protocol' to <i>Any</i>.</li>
<li>Set 'Action' to <i>Drop</i>.</li>
<li>Set 'Action' to <i>Drop</i>.</li>
</ol>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_2.png|border|class=tlt-border]]
</ol>[[File:Networking device faq blocking internet access for lan clients v4 2.png|border|class=tlt-border]]
</li>
</li>
<li>If you later wish to undo the changes, you can delete the rule or turn it off.<br>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_3.gif|border|class=tlt-border]]</li>
<li>If you later wish to undo the changes, you can delete the rule or turn it off.<br>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_3.gif|border|class=tlt-border]]</li>
<li>Set 'Source address' to the the one that you wish to block.</li>
<li>Set 'Source address' to the the one that you wish to block.</li>
<li>Set 'Action' to <i>Drop</i>.</li>
<li>Set 'Action' to <i>Drop</i>.</li>
</ol>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_4.png|border|class=tlt-border]]
</ol>[[File:Traffic rule single config Block LAN.png|border|class=tlt-border]]
</li>
</li>
<li>Alternatively, you can specify an IP address/netmask combination to include a range of addresses. For example, specifying <i>192.168.1.100/30</i> as the 'Source address' would denote a range of 192.168.1.100 to 192.168.1.103.<br>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_5.png|border|class=tlt-border]]</li>
<li>Alternatively, you can specify an IP address/netmask combination to include a range of addresses. For example, specifying <i>192.168.1.100/30</i> as the 'Source address' would denote a range of 192.168.1.100 to 192.168.1.103.<br>[[File:Traffic rule single subnet config Block LAN.png|border|class=tlt-border]]</li>
<li>If you later wish to undo the changes, you can delete the rule or turn it off.<br>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_3.gif|border|class=tlt-border]]</li>
<li>If you later wish to undo the changes, you can delete the rule or turn it off.<br>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_3.gif|border|class=tlt-border]]</li>
</ul>
</ul>
<li>Set 'Destination address' to the the one that you wish to block.</li>
<li>Set 'Destination address' to the the one that you wish to block.</li>
<li>Set 'Action' to <i>Drop</i>.</li>
<li>Set 'Action' to <i>Drop</i>.</li>
</ol>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_8.png|border|class=tlt-border]]
</ol>[[File:Traffic rule destination config Block LAN.png|border|class=tlt-border]]
</li>
</li>
<li>Alternatively, you can specify an IP address/netmask combination to include a range of addresses. For example, specifying <i>10.0.0.0/8</i> as the 'Destination address' would denote a range of 10.0.0.0 to 10.255.255.255<br>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_9.png|border|class=tlt-border]]</li>
<li>Alternatively, you can specify an IP address/netmask combination to include a range of addresses. For example, specifying <i>10.0.0.0/8</i> as the 'Destination address' would denote a range of 10.0.0.0 to 10.255.255.255<br>[[File:Traffic rule destination subnet config Block LAN.png|border|class=tlt-border]]</li>
<li>If you later wish to undo the changes, you can delete the rule or turn it off.<br>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_3.gif|border|class=tlt-border]]</li>
<li>If you later wish to undo the changes, you can delete the rule or turn it off.<br>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_3.gif|border|class=tlt-border]]</li>
</ul>
</ul>
==Blocking a specific site(s)==
==Blocking a specific site(s)==
'''Note''': On RUT and TRB series devices, Web Filter is additional software that can be installed from the '''Services → Package Manager''' page.
<ul>
<ul>
<li>To block access to a website for LAN clients, go to Services → Web Filter.</li>
<li>To block access to a website for LAN clients, go to Services → Web Filter.</li>
<li>Turn Web Filter on.</li>
<li>Turn Web Filter on.</li>
<li>Set 'Mode' to <i>Blacklist</i>.</li>
<li>Set 'Mode' to <i>Blacklist</i>.</li>
</ol>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_6.png|border|class=tlt-border]]<br>Alternatively, you can set 'Mode' to <i>Whitelist</i> to allow access only to specific sites and block access to all others.
</ol>[[File:Site blocking config Web filter.png|border|class=tlt-border]]<br>Alternatively, you can set 'Mode' to <i>Whitelist</i> to allow access only to specific sites and block access to all others.
</li>
</li>
<li>Specify sites that you wish to block under the 'Site Blocking Rules' section.
<li>Specify sites that you wish to block under the 'Site Blocking Rules' section.
<li>Specify a 'Hostname' that you wish to block.</li>
<li>Specify a 'Hostname' that you wish to block.</li>
<li>Don't forget to save the changes.</li>
<li>Don't forget to save the changes.</li>
</ol>[[File:Networking_device_faq_blocking_internet_access_for_lan_clients_7.png|border|class=tlt-border]]
</ol>[[File:Site blocking example config Web Filter.png|border|class=tlt-border]]
</li>
</li>
</ul>
</ul>
[[Category:Networking]]
[[Category:Networking]]
