User controlled firewall\access rule.

[p.nesse82]

Hi,

I'm looking for ideas on a project I'm working on.

We have some remote locations where we want to set up a network with 3 segments(WAN, DMZ, and LAN). DMZ is going to have limited access to WAN, and one port open to LAN. LAN is going to be blocked towards WAN.

But I want the user on site being able to activate a rule in the router\firewall that will let us give remote support on the LAN computers. And I want this to be as easy as possible for the user. Preferably with a physical switch, or just a few click on the computer.

Would something like this be able to be done on ex. 892FSP?

Thanks,

Pål

[Jon Marshall]

Why not simply add this a rule to the firewall for your own access when you install the routers ?

I'm sure there is more to it but I'm not sure I would want users making changes to firewall rules.

You could always setup a script I suppose for the user to run that logged into the router and allowed the necessary access temporarily and then removed it once you didn't need it any more but that seems a lot of trouble to go to when you could simply allow that access from the WAN anyway.

In addition if whatever you setup doesn't work for some reason then you are stuck basically.

It's not going to give the LAN users any access to the WAN.

Perhaps if you could clarify why you need it to be done this way ?

Jon