TP-Link Omada ER8411 VPN Router - Manual (Page 143)

User Guide 134
Configuring Behavior Control Configuration Examples
3
Configuration Examples
3.1 Example for Access Control
3.1.1 Network Requirements
In the diagram below, the R&D and some other departments are connected to a layer 2
switch and access the internet via the router. For data security purposes, it is required that
the R&D department users can only visit the official website of the company, for example:
https://www.tp-link.com. For other departments, there is no limitation of website access.
Figure 3-1 Network Topology
R R
Layer 2 Switch
router
LAN
192.168.0.1/24
WAN
1.1.1.2
Internet
R&D Department
192.168.0.10/24-192.168.0.120/24
Other Departments
3.1.2 Configuration Scheme
We can configure Web Filtering to limit the website access of the specific hosts. Both
Web Group Filtering and URL Filtering can achieve this. In this example, the configuration
difference between Web Group Filtering and URL Filtering is as follows:
■ In Web Group Filtering, you need to add the official website address to a web group
before configuring the filtering rule.