Differences

This shows you the differences between two versions of the page.

--- advanced-access [2022/01/26 18:44] – rs232
+++ advanced-access [2024/11/27 01:30] (current) – [LAN Access] -Condense, formatting hogwild
@@ Line 1: / Line 1: @@
-===== LAN Access =====
+====== LAN Access ======
-This page allows you to define LAN to LAN traffic communication where otherwise blocked. Let's assume we have two LANs one primary (LAN0/br0) and one secondary (LAN1/br1), devices in LAN0 will be able to communicate with devices in LAN1 (and all the way around).
+This page allows you to define LAN-to-LAN traffic where it otherwise would be blocked.
+ \\
+For example, say we have two LANs, one primary (LAN0/br0) and one secondary (LAN1/br1).
+If you want devices on LAN0 to communicate with devices on LAN1 (and vice versa), you might use these settings:
+ \\
+{{:pasted:20220126-183839.png}}\\   \\
+**On:** checking this enables the rule defined on this row of the table.
+ \\
+**Src:** displays/lets you configure the (Logical) Source LAN for the rule on that row of the table.
+ \\
+**Src Address:** lets you narrow the rule to a specific IP address/set of addresses within the Src interface.
+ \\
+**Dst:** here, you specify the (logical) Destination LAN for the rule on this row of the table.
+ \\
+**Dst Address: **(optionally), narrows the rule to a specific IP address/set of addresses within the Dst interface.
+ \\
+**Description:** a free text field in which you can enter whatever you wish, such as notes, reminders.
+ \\
+\\
+===== LAN Access Notes =====
+  * Regardless of LAN Access rules, by default a LANx device is able to reach (e.g. ping) all the router's LAN interfaces (only). This is by design.
+  * All entries in LAN Access are one-way only. For example, if you want hosts on LAN0 to be able to communicate with hosts on LAN1, and vice versa, you'll need two entries in the table to achieve that.
+  * LAN Access is an IP-level access control. Therefore, **all ports/protocols are automatically enabled**. If additional fine tuning is needed (for example, you want to allow only allow port 80/TCP) you'll need to manually configure settings instead.
+ \\
+ \\
-{{:pasted:20220126-183839.png}}\\
-**On**: Makes the defined rule active.\\
-**Src**: Source logical LAN for the rule.\\
-**Src Address**: (optional) narrows down the rule to a specific IP or set of within the Src interface.\\
-**Dst**: Destination logical LAN for the rule.\\
-**Dst Address**: (optional) narrows down the rile to a specific IP or set of within the Dst interface.\\
-**Description**: Free text field.\\
-Please note: regardless of the LAN Access rules, by default a LANx device is able to reach (e.g. ping) all the router's LAN interface (only). This is by design.

FreshTomato Wiki

User Tools

Site Tools

Differences

Page Tools