I need to set up my RUTX08 as a switch and only allow LAN1 and LAN2 to communicate with LAN3, and only allow WAN to communicate with LAN3.
I have two HMI’s that IT wants me to take off the plant network and only communicate with the PLC. And the PLC needs to communicate with the plant network. My problem is that I can’t change the IP address of the HMI’s or the PLC. So everything must be on the same LAN metric.
My firmware ver. is RUTX_R_00.07.22.1
Greetings,
This can be achieved on the RUTX08 by assigning static IP addresses to the HMI and PLC devices and then configuring firewall traffic rules to control communication between them.
First, go to Network → DHCP → Static Leases and ensure that the HMIs and PLC have fixed/static IP addresses. This is important because the firewall rules will use these IP addresses to identify the individual devices.
Next, go to Network → Firewall → Traffic Rules and create rules that allow or block communication between the specified IP addresses.
For example, the attached screenshot shows how a rule can be configured to block a specific LAN device from communicating with the WAN/Internet.
If communication needs to be restricted between devices on the LAN rather than between LAN and WAN, the Destination Zone should be set to LAN, with the appropriate static source and destination IP addresses specified.
This allows the existing IP addresses of the HMIs and PLC to remain unchanged while using firewall rules to restrict their communication as required.
Best regards,
T.
