Forums

Stories

Knowledge Base

Business Community > Routers > IPV4 Firewall Lan to Wan rule blocks internal communication with DVR

< Routers

IPV4 Firewall Lan to Wan rule blocks internal communication with DVR

MacFast

LV1

2023-12-02 01:32:38 - last edited 2023-12-08 05:46:37

Posts: 1

Helpful: 0

Solutions: 0

Stories: 0

Registered: 2023-12-02

IPV4 Firewall Lan to Wan rule blocks internal communication with DVR

2023-12-02 01:32:38 - last edited 2023-12-08 05:46:37

Tags: #Gateway ACL

Model: ER605 (TL-R605)

Hardware Version: V2

Firmware Version: 2.0.0 Build 20220106 Rel.56391

I have a surveillance DVR on my LAN. It is managed, and recordings viewed, with software from a PC. Both are on VLAN1 (192.168.1.0/24). Both have fixed ip addresses within that range. As a security measure I want to prevent the DVR from communicating with the internet. Offsite access is not required. I've set up a firewall rule which blocks traffic from the DVR IP, which is source configured as "Cobra_DVR" IP group. See below. The rule direction is LAN->WAN, and WAN IN.

The problem: This rule prevents the software on the PC from communicating with the DVR. If I remove the LAN->WAN direction, leaving only WAN IN, the problem goes away. Since both devices are on the same VLAN, why is this happening? Is there a way to correct it?

1 Accepted Solution

Clive_A

2023-12-04 01:03:17 - last edited 2023-12-08 05:46:37

Posts: 3378

Helpful: 1020

Solutions: 684

Stories: 0

Registered: 2023-06-09

Re:IPV4 Firewall Lan to Wan rule blocks internal communication with DVR-Solution

2023-12-04 01:03:17 - last edited 2023-12-08 05:46:37

Hi @MacFast

Thanks for posting in our business forum.

1. Understand how ACL works and refer to the example in the guide. ER605(UN)_V2_User Guide

Of course you unselect the LAN > LAN and it works. WAN IN means incoming traffic from the WAN. The literal meaning of it.

2. As a supplementary reference to your setup. How to implement unidirectional VLAN access through ACL configuration on the Omada Gateway in Controller mode

You should choose your direction according to your desired way.

LC34: Full TP Link Omada Configuration Set Up ER605 ER7206 ER8411 Home, IoT, Camera, Guest,ACL,mDNS

3. To address the issue that they are in the same LAN, create an IP group in the Preferences. In the source and destination section, set the IP group you created.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Beta firmware got some NEW features! Subscribe for the latest update! ☛Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting Manual ★ ☚ (Disclaimer: Short links are used above solely for guidance to TP-Link subdomains and are safe and tracker-free. Exercise caution with short links from non-official members on forums. We are not liable for external content or damage from non-official members' link use.)

Recommended Solution

1 Reply

Clive_A

2023-12-04 01:03:17 - last edited 2023-12-08 05:46:37

Posts: 3378

Helpful: 1020

Solutions: 684

Stories: 0

Registered: 2023-06-09

Re:IPV4 Firewall Lan to Wan rule blocks internal communication with DVR-Solution

2023-12-04 01:03:17 - last edited 2023-12-08 05:46:37

Hi @MacFast

Thanks for posting in our business forum.

1. Understand how ACL works and refer to the example in the guide. ER605(UN)_V2_User Guide

Of course you unselect the LAN > LAN and it works. WAN IN means incoming traffic from the WAN. The literal meaning of it.

2. As a supplementary reference to your setup. How to implement unidirectional VLAN access through ACL configuration on the Omada Gateway in Controller mode

You should choose your direction according to your desired way.

LC34: Full TP Link Omada Configuration Set Up ER605 ER7206 ER8411 Home, IoT, Camera, Guest,ACL,mDNS

3. To address the issue that they are in the same LAN, create an IP group in the Preferences. In the source and destination section, set the IP group you created.

Information

Helpful: 0

Replies: 1

IPV4 Firewall Lan to Wan rule blocks internal communication with DVR

IPV4 Firewall Lan to Wan rule blocks internal communication with DVR

Information

Voters 0

Tags