TP-Link TL-R600VPN Configuration Manual page 116

Configuring Firewall Configuration Examples
This rule means that all packets from the R&D department are blocked from being sent
from the LAN to the internet at all times.
Figure 3-8 Configure Block Rule for ALL Services
8) Verify your configuration result. In the Access Control List, the rule with a smaller ID has a
higher priority. Since the router matches the rules beginning with the highest priority, make
sure the three Allow rules have the smaller ID numbers compared with the Block rule. In this
way, the router checks whether the received packet matches the three Allow rules first, and
only packets that do not match any of the Allow rules will be blocked.
Figure 3-9 Verify Configuration Result
Configuration Guide 108