Skip to main content
Micky182
New Member
November 11, 2018
Question

Help me to block fraffic on Modem Lan

  • November 11, 2018
  • 1 reply
  • 2694 views

Hi Guys,

 

I've setup my fortigate with WAN1 IP: 192.168.1.253/24 and internal LAN IP 192.168.0.200/24.

My Default gateway in static route is my ISP modem IP 192.168.1.1 and the route is: 0.0.0.0./0.0.0.0 destination to 192.168.1.1.

 

From my IPv4 Policy i have enabled the NAT from LAN to WAN1 (from the internal LAN to WAN1) i've created the rule with all/alll to destination wan1: ACCEPT.

 

Now with this configuration everything is good but i want to disable from my internal LAN (192.168.0.x) to access to my modem

web page setup (192.168.1.1)  and other devices in the modem's LAN (192.168.1.x).

What can i do to prevent the access on LAN 192.168.1.x but still forward all the traffic to the modem and then permit traffic to go out to internet?

 

Thank you very much,

Michele.

 

1 reply

Toshi_Esumi
SuperUser
SuperUser
November 12, 2018

That's a basic feature of any FWs. Create a new policy to block from 0.x to 1.x and place it above the current all to all allow policy.

Micky182
Micky182Author
New Member
November 12, 2018

Thank you very much :) !!