The WAN (corporate network) and LAN (machine network) side of the StrideLinx router are separated by its internal firewall. However, when you are on-site you may, for example, need internet access to look up user manuals or to have the machine send e-mails. You may also need access to the corporate network, for example, when a PLC needs to store data on a local FTP server.

You can then choose to:

• Allow ALL access to corporate network
• Allow ALL access to internet
• Allow LIMITED access to corporate network and internet

Allow all access to corporate network or internet

Allow all devices, on the LAN of the StrideLinx router, full access to either the corporate network or the internet:

• Go to Fleet Manager > Devices > Your device > Network > Firewall > LAN to WAN, toggle the desired option, and push the changes to the device.
  

  Option	Description
  Allow access to corporate network	All incoming LAN traffic with the corporate network as destination (i.e. any private IP address other than the StrideLinx router's LAN) will be allowed through the firewall.
  Allow access to internet	All incoming LAN traffic with the internet as destination (i.e. any public IP address) will be allowed through the firewall. You do not need to turn on "access to corporate network" for internet access to work.

Allow limited access to corporate network and internet

Allow configured devices on the LAN of the StrideLinx router limited access to both the corporate network and the internet. Available in StrideLinx router3 models running firmware 3.22 or higher.

• Open the Configuration page on the StrideLinx router's local web interface.
• Enter the password listed on the side of the StrideLinx router. If there is no password listed, no password was set during production. In that case, contact us to set one for you.
• Find the setting LAN to WAN allow list under LANWAN.
• Add an entry for every device, protocol, or port you want to allow access to both the corporate network and the internet. A source (source IP / MAC) or destination (port) is required.
  

  Option	Description
  Source IP	The source device's IP address.
  Source MAC	The source device's MAC address.
  Protocol	Select a protocol to allow or select all to allow all protocols.
  Port	Enter the allowed port or leave empty to allow traffic over all ports.

  Please note that if either of the other settings are active (Allow access to corporate network / internet), they overrule the LAN to WAN allow list.
• Apply your changes.