@mati2762 

How to define this rule by GUI or how run this rule automatic when router restared ?

iptables -I INPUT -p tcp --dport 80 -s 192.168.30.0/24 -j DROP

Hi  @mati2762 

You don't tell if you are in standalone or controller mode, but here is the GUI with controller :
Go to network Security and create an ACL rule gateway or switch depending where is connected your specific Vlan:

  @mati2762 

Thx for your comment and image. I used standalone mode and in this mode i haven't this options.

This article have  https://www.tp-link.com/us/support/faq/3357/ 

Gateway ACL in Controller mode can only restrict traffic from LAN to WAN; ACL in Standalone mode can also restrict traffic from WAN to LAN and LAN to LAN.

I don't know it will work but I will test it in my spare time

  @mati2762 

however I can't create

  @mati2762 

My solution is add script to crontab who run iptables. like this

*/3 * * * * /bin/sh /tmp/userconfig/etc/my_custom_script.sh

because firewall[dot]user not working
If someone have better solution, please write.