How Do I Block Internet access for LAN clients?
This article contains instructions on how to block Internet access for LAN clients using a Teltonika-Networks device.
Access between your end device and other networks is controlled by the firewall of your network device (Router, gateway). Therefore, you will need to change the firewall configuration to set network access restrictions. On Teltonika-Networks devices this can be done via the Network → Firewall page.
First, go to Network → Firewall → Traffic Rules page.
Go to 'Add New Forwarding Rule' and create a rule as follows:
1.Create a custom name for the rule.
2.Set 'Source Region' to lan.
3.Set 'Destination Zone' to wan.
4.Click 'Add'.
To block all LAN clients from accessing the Internet, set the rule as follows;
Set 'Protocol' to Any.
Set 'Action' to Release.
If you want to revert the changes later, you can delete or close the rule.
Setting for single PC or range of PCs;
To prevent a single LAN client from accessing the internet, set the rule as follows:
1. Set 'Protocol' to Any.
2. Set the 'Source address' to the address you want to block.
3. Set 'Action' to Release.
Alternatively, you can specify an IP address/netmask combination to include a range of addresses. For example, specifying 192.168.1.100/30 as the 'Source address' specifies the range 192.168.1.100 to 192.168.1.103.
Block a specific IP or network;
To block all LAN clients from accessing a specific IP address, set the rule as follows:
To block all LAN clients from accessing a specific IP address, set the rule as follows:
1.Set Protocol Any to one.
2.Set the target address to the address you want to block.
3.Action Set to Drop.
Alternatively, you can specify an IP address/netmask combination to include a range of addresses. For example, specifying 10.0.0.0/8 as the 'Target address' specifies the range 10.0.0.0 to 10.255.255.255.
Blocking a specific site(s);
To block access to a website for LAN clients, go to Services → Web Filter.
1-Set the main parameters of the Web Filter in the 'Site Blocking Settings' section.
2-Turn on Web Filter.
3-Set the mode to Blacklist.
Alternatively, you can set the 'Mode' to Whitelist to only allow access to certain sites and block access to others.
The sites you want to block appear in the 'Site Blocking Rules' section.
1.Click 'Add' to create a new entry in the list. Log in as many times as you want.
2.Impression of a 'Hostname' that you want to block.
3.Do not forget to save the changes.