User Tools
advanced-access
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| advanced-access [2026/01/08 22:48] – [LAN Access] -Grammar, style, formatting hogwild | advanced-access [2026/01/08 23:03] (current) – [LAN Access Notes and Troubleshooting] hogwild | ||
|---|---|---|---|
| Line 11: | Line 11: | ||
| {{: | {{: | ||
| - | **On: | + | **On:** enables the rule defined on this row of the table. |
| \\ | \\ | ||
| Line 23: | Line 23: | ||
| \\ | \\ | ||
| - | **Dst:** here, you specify the (logical) Destination LAN for the rule on this row of the table. | + | **Dst:** here, specify the logical Destination LAN for the rule on this row of the table. |
| \\ | \\ | ||
| Line 35: | Line 35: | ||
| \\ | \\ | ||
| - | \\ | + | \\ |
| + | |||
| + | |||
| + | ===== LAN Access Notes and Troubleshooting ===== | ||
| + | |||
| + | * On releases r2025.4 and earlier, regardless of LAN Access rules, a LANx device was able to reach (e.g. ping) all the router' | ||
| + | * On r2025.5 and later: FreshTomato LAN interfaces can only be reached from within the same subnet. Thus, a device at 192.168.10.10 can only reach the router at its address on the same subnet e.g. 192.168.10.1. | ||
| - | ===== LAN Access Notes ===== | + | * All entries in this menu are one-way only. If you want hosts on LAN0 to communicate with hosts on LAN1, and vice versa, you'll need two entries in the table for that. |
| - | | + | * LAN Access is an IP-level access control. Therefore, **all ports/ |
| - | * All entries in LAN Access are one-way only. For example, if you want hosts on LAN0 to be able to communicate with hosts on LAN1, and vice versa, you'll need two entries in the table to achieve that. | + | |
| - | | + | |
| \\ | \\ | ||
advanced-access.1767912512.txt.gz · Last modified: by hogwild
Page Tools
