Help me to block fraffic on Modem Lan

[Micky182]

Hi Guys,

I've setup my fortigate with WAN1 IP: 192.168.1.253/24 and internal LAN IP 192.168.0.200/24.

My Default gateway in static route is my ISP modem IP 192.168.1.1 and the route is: 0.0.0.0./0.0.0.0 destination to 192.168.1.1.

From my IPv4 Policy i have enabled the NAT from LAN to WAN1 (from the internal LAN to WAN1) i've created the rule with all/alll to destination wan1: ACCEPT.

Now with this configuration everything is good but i want to disable from my internal LAN (192.168.0.x) to access to my modem

web page setup (192.168.1.1)  and other devices in the modem's LAN (192.168.1.x).

What can i do to prevent the access on LAN 192.168.1.x but still forward all the traffic to the modem and then permit traffic to go out to internet?

Thank you very much,

Michele.

[Toshi_Esumi]

That's a basic feature of any FWs. Create a new policy to block from 0.x to 1.x and place it above the current all to all allow policy.

[Micky182]

Thank you very much :) !!