Technology Encyclopedia Home >Does the router support IP-based access control lists (ACLs)? How do I configure allow_hosts?

Does the router support IP-based access control lists (ACLs)? How do I configure allow_hosts?

Created on 2026-02-06 22:24:52
10

Yes, most modern routers support IP-based Access Control Lists (ACLs), which are used to filter network traffic based on IP addresses, protocols, or ports. ACLs help enhance network security by allowing or denying specific traffic.

How ACLs Work

An ACL contains a set of rules that define whether traffic is permitted or denied. Each rule typically specifies:

  • Source IP address (or range)
  • Destination IP address (or range)
  • Protocol (e.g., TCP, UDP, ICMP)
  • Port number (if applicable)
  • Action (allow or deny)

ACLs can be applied to inbound or outbound traffic on an interface (e.g., LAN, WAN).

Configuring allow_hosts (Allowing Specific Hosts)

The term allow_hosts may not be a universal standard, but it generally refers to creating ACL rules that permit traffic from specific IP addresses (hosts). The exact steps depend on your router’s brand and firmware (e.g., OpenWRT, Cisco, TP-Link, etc.). Below is a generic guide:

Example: Allow Only Specific IPs (Allow_List)

Suppose you want to allow only 192.168.1.100 and 192.168.1.101 to access the internet, and block all other devices.

  1. Access Router Admin Panel
    Log in to your router’s web interface (usually via http://192.168.1.1 or similar).

  2. Navigate to ACL or Firewall Settings
    Look for sections like:

    • Access Control
    • Firewall > Access Rules
    • Security > IP Filtering

  3. Create an Allow Rule
    Add a rule like:

    • Action: Allow
    • Source IP: 192.168.1.100 (and repeat for 192.168.1.101)
    • Destination IP: Any (0.0.0.0/0)
    • Protocol: Any (or specify TCP/UDP if needed)

  4. Create a Deny Rule (Optional but Recommended)
    Add a rule to block all other traffic:

    • Action: Deny
    • Source IP: Any (0.0.0.0/0)
    • Destination IP: Any (0.0.0.0/0)

  5. Apply & Save
    Ensure the rules are ordered correctly (usually, allow rules first, then deny rules).

Using Tencent Cloud Services (If Applicable)

If you're managing a network in a cloud environment (e.g., VPCs), Tencent Cloud provides Virtual Private Cloud (VPC) and Security Group features that work similarly to ACLs.

  • Security Groups act as virtual firewalls for instances, allowing you to define inbound/outbound rules based on IPs and ports.
  • Network ACLs (NACLs) in Tencent Cloud VPCs control traffic at the subnet level, supporting allow/deny policies for IP ranges.

You can configure these rules via the Tencent Cloud Console under VPC > Security Group or VPC > Network ACL.

Would you like a more specific example for a particular router model?