RUT950 (Legacy): Internet Access to Specific IPs

[CoClaassen]

Hi,

I’m currently trying to setup the RUT950 as a Router and allow only specific IPs to have internet access on LAN side. However currently i don’t even have internet access through any of the LAN ports.

• How do setup the device to allow internet access from WAN to LAN?
• How would i block IPs from receiving internet access?

FW: RUT950_R_00.06.09.5

[Martynas]

Hello,

Thank you for reaching out. To address your query, here’s what I recommend:

1. Firmware Upgrade

The first step is to upgrade your legacy firmware to the latest version, RUT9_R_00.07.06.17, using the Bootloader’s menu. This method is the most secure and reliable way to transition from legacy firmware versions.

2. Allowing Internet Access from WAN to LAN

Could you provide a screenshot of Network → Firewall → General Settings → Zones? To allow traffic from LAN to WAN, ensure the following policies for LAN zone are enabled:

• Input: Accept
• Output: Accept
• Forward: Accept

3. Blocking Internet Access for Specific IPs

To block internet access for specific IPs, you need to create a traffic rule:

• Navigate to Network → Firewall → Traffic Rules;
• In the Add new instance section select Add new forward rule;
• Assign a name for the rule;
• Configure the following:
  • Source Zone: LAN
  • Destination Zone: WAN
  • Protocols: (Specify if needed or leave as Any)
  • Source IP: Enter the IP address of the LAN device to block.
• Set the Action to Reject.
• Save and apply the settings.

If you encounter any issues or have further questions, feel free to provide additional details.

Best regards,

[CoClaassen]

Thank you, I’ll let you know if i succeed

[CoClaassen]

It seems there is a checksum error

I think i downloaded the correct one

[CoClaassen]

I downloaded the latest one

[Martynas]

Hello,

Thank you for your update. Could you clarify which firmware file you downloaded? It should be a .bin type file and can be downloaded directly from here: RUT9_R_00.07.06.17_WEBUI

If you encounter issues uploading it via the Bootloader menu, please try uploading it through the WebUI by navigating to System → Firmware and selecting the file there.

Looking forward to hearing back from you. Let me know if you need further assistance.

Best regards,

[CoClaassen]

@Martynas

d you clarify which firmware file you

Yes, indeed it is

[CoClaassen]

It seems I’m entirely locked out from the device as i can’t access the webUI or Bootloader

Edit:
My IP settings

The LAN side IP should be 10.4.20.2 for the device

[CoClaassen]

@CoClaassen

entirely locked out from the device as i can’t access the webUI or Bootloader

Edit:

I see my issue, my ip was set to 192.168.1.1

[Martynas]

Thank you for the update.

Could you try logging into the router via SSH? Once connected, please run the following command and share its output:

hexdump -C /dev/mtd1  

If accessing the CLI via SSH is not possible, could you check and let me know what WiFi SSID is currently displayed by the device (if any)?

[CoClaassen]

I downloaded the one in the link you gave, it still fails

[CoClaassen]

Cant access via putty or webUI

[CoClaassen]

@CoClaassen

ia putty or webUI

I now tried using the FW upgrade tool in the webUI, it says the device is incompatible with the new FW

RUT950 UG12CO
Don’t know if you want any other detail?

I see i have a limit on replies, appolagies. Would have been nice to know.

[CoClaassen]

@Martynas

cept

Continuing with the issue:

Here is the Firewall rules

Still no internet access for LAN devices

Edit:
Here are the traffic rules.

Seems i have hit reply limit

[Martynas]

Could you please confirm the product code of your RUT950? You can find it in Status → System. If the product code is RUT950XG1XXX, then the device will not support upgrading RutOS firmware from legacy versions to the newer ones.

Additionally, could you verify the following:

1. Does your device has an active internet connection (via wired, mobile, or wireless WAN)?
2. Can you ping 8.8.8.8 from the router’s CLI or using the diagnostics tool from System → Maintenance → Troubleshoot section?

[CoClaassen]

Product code: RUT950UG1XXX

1. Does your device has an active internet connection (via wired, mobile, or wireless WAN)?
   Yes, the RUT used to have a WAN connection aswell but now only a Mobile connection is present.
   

   
   
   
   

2. Can you ping 8.8.8.8 from the router’s CLI or using the diagnostics tool from System → Maintenance → Troubleshoot section?
   

   

After “ctrl + c”: