Illustration of enterprise router management users' access to the Internet website

Applicability: TL-R473 V3, TL-R483 V3, TL-R478 V4, TL-R478 + V5, TL-R4148 V4, TL-WVR300 V1, TL-R478G + V1, TL-WVR450G V2;

Configuration requirements

In an enterprise environment, different departments have different network requirements because of their different division of labor. The following are common requirements:

I. The R & D department only prohibits access to video websites in the website Group;

II. The sales department can only access the company's official website and transmit files to customers through QQ.

The following take our company TL-WVR450G as an example to achieve the above requirements for the configuration.

Procedure

1.Website group settings

In a website Group, the websites to be accessed by the same user group are placed in the same website group, so that you can select the website access filtering rules for different user groups in the future. Add a group to add the websites that the sales department needs to access. You can useWildcard"*"(For example, to allow access to Baidu, if www.baidu.com is set, only the Baidu homepage can be opened. If news.baidu.com, mp3.baidu.com, or other webpages can be opened, you can use * .baidu.com, * can match any character ).

2.Website filter settings

In the website filtering settingsSales DepartmentAdd two rules: allow employees in the sales department to access the website in the "sales department" group, and deny employees in the sales department to access all websites. The first rule is set as follows:

Select "sales department" in the website group list.

The second rule is set as follows:

In the website filtering settingsR & D departmentYou only need to set the following rule:

Select a video group from the website group list.

3. URLFilter settings

After website filtering is configured, employees in the sales department can only access the official website. However, after all websites are disabled, uploading QQ files offline will also be disabled (the QQ offline files use the HTTP protocol ), in addition, because the HTTP package for uploading files offline via QQ does not use a fixed address or domain name, QQ cannot be allowed to upload offline files through website filtering. However, each time QQ uploads an offline file, the same keyword "key" is used. In this way, you can use URL filtering to allow QQ to transmit offline files.

Note:Because the URL filtering priority is higher than the website filtering priority, even if the website filtering does not allow access to all websites except the official website, the same keywords that can be accessed in URL filtering can be accessed normally.

After completing the above steps, the requirements of the sales department and the R & D department can be fulfilled perfectly. One thing worth noting here is that not all websites can be handled by * .tp-link.com.cn just like our official website, because many large portal websites are nested by many different domain names, if only one primary domain name is allowed (for example, only www.163.com is allowed, many parts of NetEase's homepage may not be displayed normally) the web page cannot be fully opened. The following describes all the domain names of Taobao.