We have launched the new version of the DrayTek website, and this content is no longer being maintained.
You will find more information on our new site; however, we will keep this page for a few months.

[Vigor3900] How to allow a few website for some of LAN clients only?

Organizations like libraries may provide computers at their lobby for the visitor to search for resource and services on their own websites, but they might not want the visitor to use those computers for other uses. This note will demonstrate how to use URL Filter to block all the websites from certain LAN clients and allow Internet access to only specific ones, while other LAN clients are able access the Internet without restriction.

(This article applies to Vigor3900, Vigor2960, and Vigor300B. For other models, please refer to the article here)

Configuring Vigor3900

1. Create a IP Object for the LAN clients in lobby. Go to Objects Setting >> IP Object, click Add to create a new profile.

  1. Enter the Profile name.
  2. Select Address Type as Range
  3. Enter Start IP Address and End IP Address as the IP address range for the LAN clients at the lobby.
  4. Click Apply to save.
   

2. Create a Keyword Object for the URL to pass. Go to Objects Setting >> Keyword Object, Click Add to create a new one.

  1. Enter the Profile name.
  2. Click Add to add a new keyword.
  3. In Member Table, enter the keyword of the URL that is allowed to pass.
  4. Click Apply to save.
   

3. Set a IP Filter to block all the pages if the packet is from the lobby's IP address. Go to Firewall>> Filter Setup >> IP Filter, click Add to create a new Group. Enter the Group's name and click Apply to save.

   

4. In the Group created in previous step, add a new profile:

  1. Enter Profile name.
  2. Enable this profile.
  3. For Action, Select Block If No Further Match.



  4. For Source IP Object, select the IP Object we set for lobby's IP addresses.



  5. Click Apply to save.

5. Set a URL/Web Category Filter to allow accessing specific website. Go to Firewall >> Filter Setup >> URL/Web Category Filter, click Add to create a new profile.

  1. Enter Profile name.
  2. Enable this profile.



  3. For Source IP, select the IP Object we set for lobby's IP addresses.



  4. At Action Policy > Keyword Accept, select the Keyword Object we set for the URL to pass.



  5. Click Apply to save.


Verifying

With this configuration, for LAN client whose IP address is in the range between 192.168.1.10 to 192.168.1.20, which should be the computers at the lobby, the connection will be fine when they try to access the website with URL containing the keyword.

   

But when trying to access other pages, an error message will appear.

   

On the other hand, if the LAN client's IP address is not in the range of 192.168.1.10 to 192.168.1.20, they will be able to access the Internet without restriction.

   
Was this article helpful?
33[Vigor3900] How to allow a few website for some of LAN clients only? has been viewed------ 33 ------times.