Hi,
we are using TRB140/RUT240 routers to connect different machinery to the internet.
Oftentimes, the router is located in a semi-secure place and a potential intruded could connect a device locally to the router / network without being noticed. Hence, we would like to introduce some firewall rules:
- for newly connected / "unkown" devices, allow traffic only to the router; hence if you connect with your notebook, you can still reconfigure the router (if you know the credentials) but you cannot connect to other machines
- only if the MAC-address of the connected devices is explicitly allowed, the device can connect to other devices in the LAN or to the internet
How could I implement this?
