ER605 adding clients to IP GROUP
![](/avatar/avatar-19.png)
Have tried all avenues and resorting to asking here.
New to the ER605.
I want to block access to the WAN port for all new clients.
Once I have reserved the IP address, I wish to add to one of two IP Groups - One unrestricted, one restricted, using web filters
I cannot figure out how to add a client IP address to an IP group. I must be missing something simple...
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
![](https://static-community.tp-link.com/icon/d992b79227f44913ac92e1d95b8e517c.jpeg)
Hi @cmfield
Thanks for posting in our business forum.
To block the web GUI of the router, you should block the port 80 and 443 from the clients. Not just the IP address, it should work with the port.
Standalone:
Controller:
- Copy Link
- Report Inappropriate Content
![](https://static-community.tp-link.com/icon/d992b79227f44913ac92e1d95b8e517c.jpeg)
Hi @cmfield
Thanks for posting in our business forum.
To block the web GUI of the router, you should block the port 80 and 443 from the clients. Not just the IP address, it should work with the port.
Standalone:
Controller:
- Copy Link
- Report Inappropriate Content
Thanks, I get that, but how do I add a newly connected client to an IP group?
A client connects, and I reserve thier IP address. I then want to add them to one of two IP Groups, with different permissions for internet access.
I can set the IP groups etc, but I don't see the point in having IP ranges for them unless I can issue a static lease to a different range (Gp1: 192.168.0.100-199 or Gp2: 192.168.0.200-250 for example).
Gp1 to have full internet access, and Gp2 to have restricted (by URL etc) access. All from the same AP on the WAN port. Or is this not possible without a second AP?
- Copy Link
- Report Inappropriate Content
Hi @cmfield
cmfield wrote
Thanks, I get that, but how do I add a newly connected client to an IP group?
A client connects, and I reserve thier IP address. I then want to add them to one of two IP Groups, with different permissions for internet access.
I can set the IP groups etc, but I don't see the point in having IP ranges for them unless I can issue a static lease to a different range (Gp1: 192.168.0.100-199 or Gp2: 192.168.0.200-250 for example).
Gp1 to have full internet access, and Gp2 to have restricted (by URL etc) access. All from the same AP on the WAN port. Or is this not possible without a second AP?
This is gonna be manual. There is no automation for that.
- Copy Link
- Report Inappropriate Content
![](/avatar/avatar-19.png)
Information
Helpful: 0
Views: 334
Replies: 3
Voters 0
No one has voted for it yet.