How to block clients from accessing the LAN?

LAN access can exclusively be blocked in Routing mode. Enabling the LAN access block function instructs all Plasma Cloud Access Points to block - by means of firewall rules - any traffic directed to the local LAN. As per RFC1918, this is done by blocking access to the following standard private IPs:

• 10.0.0.0/8;
• 172.16.0.0/12;
• 192.168.0.0/16.

Please note that the LAN access block function is available for both wireless and wired clients.

To block WiFi clients from accessing the LAN on specific SSID(s), you need to:

1. Log into the Plasma Cloud console;
2. Select the Organisation and Network you wish to configure from the top right menu;
3. Navigate to Settings > SSIDs > SSID name in the main menu on the left;
4. Click on the Mode drop-down menu in the WAN section and select Routing;
5. Active the toggle titled Enable LAN block that will appear next to the Mode drop-down menu;
6. Click on the Save button.

Similarly, to block wired clients from accessing the LAN, you need to:

1. Log into the Plasma Cloud console;
2. Select the Organisation and Network you wish to configure from the top right menu;
3. Navigate to Settings > Network in the main menu on the left;
4. Click on the Mode drop-down menu in the Wired clients configuration section and select Routing;
5. Activate the toggle titled Enable LAN block that will appear next to the Mode drop-down menu;
6. Click on the Save button.