Differences

This shows you the differences between two versions of the page.

--- advanced-access [2023/09/11 18:36] – [LAN Access] -grammar, condense hogwild
+++ advanced-access [2023/09/12 17:20] – [LAN Access Notes] -clarity on unidirectional nature of rule, formatting hogwild
@@ Line 34: / Line 34: @@
 Regardless of LAN Access rules, by default a LANx device is able to reach (e.g. ping) all the router's LAN interfaces (only). This is by design.
-LAN Access is an IP-level access control. This means that **all ports/protocols are automatically enabled**. If additional fine tuning is required (for example, you wanted to allow only allow port 80/TCP) you will need to manually configure settings instead.
+All entries in LAN Access are one-way only.
+For example, if you want hosts on LAN0 to be able to communicate with hosts on LAN1,
+and hosts on LAN1 to be able to communicate with hosts on LAN0, you will need to have two entries in the table to achieve that.
+LAN Access is an IP-level access control.
+This means that **all ports/protocols are automatically enabled**. If additional fine tuning is required (for example, you wanted to allow only allow port 80/TCP) you will need to manually configure settings instead.
  \\

FreshTomato Wiki