Block all internet traffic/allow only VPN traffic

Product Discussion Pepwave MAX
1

Hi all,

We have multiple BR1 mini’s and Balance One at the central office.

I’m having difficulty configuring a firewall rule set, where I would like to block all traffic on the BR1’s to the internet and only allow the BR1‘s to route IP traffic via the tunnel. If I understand correctly using ‘route all traffic’ will still allow connection to the internet via the Balance One, so not a solution.

can anyone provide me direction how to configure this? Thanks!

2

Add a firewall src 192.168.50.1 (or whatever your gateway is) and allow it. (to not block the pepwave.)
Add a firewall src 192.168.50.0/24 (or whatever your ip network is) and block it.(to block all clients.)

3

Really that simple, huh? I was overcomplicating it in my head I guess…

Thanks Jonathan, will configure this and test it.

4

Hi if my network is on L2 and I use hd2 on the endpoint and hd4 in the center and my DG of the L2 is not the peplink but a privet switch. If I want to access only the swith and what is behind it on the other side from the speedfusion from my hd2 and I don’t want to give free internet access to the hd2 (only incontrol we need access) and all other traffic should go through the tunnel to the switch.
Can someone help me with a guide to closing the communication/internet access. I tried by myself to limit access through firewall rules and I also tried outband police but it didn’t help or it stayed