TheFatGuy wrote

Hello, Everybody.

 

I seem to have a bit of an issue with our Business Router - it's a TL-ER6120.

So, we have a larger LAN, with subnet 255.255.248.0.

 

There is one specific IP, 192.168.169.9 that must only be able to talk to 192.168.168.4 (the TP-Link Router) - no other IP on the LAN.

I set up a firewall rule that does not work - the router does not block anything. There is one thing - the output of the router is connected

to a switch (only one LAN port is used).

 

Is there any solution that i can make the .169.9 IP only see the router and not the rest of the local network ?

 

2

Allow_Routers

192.168.169.9

Me

Allow

ALL (all ports)

LAN (LAN Interface)

Any (Time)

3

Block LAN for .9

192.168.169.9

!Me

Block

ALL (all ports)

LAN (LAN Interface)

Any (Time)

 

I did define the 192.168.169.9 address in the Preferences > IP Group & IP Address but, still, no effect.

Do i have to plug the .169.9 client directly to the router for this to take effect ? Thanks !

Hi TheFatGuy

The router cannot block the data from LAN to LAN. Because these datas do not need to pass CPU so the solution cannot take effect. You can block the data from LAN to WAN or from WAN to LAN.

If the device that needs to be isolated is connected to TP-Link router directly and you are using ER6120 V2, you can set up the individual VLAN for this device. Then this deivce will be not able to access other local devices.