using OfficeConnect ADSL Wireless 11g Firewall Router, How to block user using internet on lan ( not wireless)?

3 responses so far ↓

• 1 GTB // Oct 1, 2008

  I believe you are only slightly familiar with the concepts you are discussing. Perhaps a recap will help you.

  Wired routers assume all that are plugged into the LAN have permission to be on the LAN. This is because the physical connection is by wire and this is by its nature more easily controlled. If you do not want someone on the LAN, you unplug them from the network switch. Of course this keeps them off the LAN entirely, not just off the Internet.

  Wireless routers assume that there is no simple physical layer connection that can be unplugged. Wireless signal can pass through windows, walls, property lines, etc and this can permit anyone within signal distance to access the LAN. Because unauthorized access can and usually does result in problems of substantial dimension, wireless routers have means of blocking unauthorized users via encryption, preshare key, and MAC validation. If a wireless user does not match the security steps, the user is denied total LAN access which includes Internet and all other LAN access. It does not permit LAN access for file transfer, for example, while it blocks Internet access.

  Having said all the above:

  1. There is no way, with wired or wireless routers, to block someone from Internet access and permit LAN access.
  2. If you wish to block someone who has a wired access from accessing the LAN, unplug the individual at the network switch.
  3. If you wish to limit Internet access, you will need another appliance, a web blocker. These can be fairly flexible in what they permit and what they block but the discussion of these is beyond the scope of this question.

• 2 talerno // Oct 1, 2008

  Here''s a link to the manual in PDF format. Page 54 is what you are looking for. This was going by the name you gave it's the router I found. This is also assuming I understood you correctly and you were looking to keep someone on your internal lan from getting out to the internet. You can do it by MAC address or IP address or address range. If you only want to block a certain computer then go by mac address.
  If you are looking to block incoming data, then that is the default setting on the firewalls.

• 3 Davy // Jan 26, 2009

  Hey, GTB, reference your statement that there is no way to allow lan access and block internet access short of unplugging at switch. Then please explain how I am getting lan connectivity and no internet access (local connection only), using Vista at our hotel in certain areas, adsl wireless access points. I can connect fine in the lobby and in our main wing, but not in two other areas. How do I go about troubleshooting this please? I am in Thailand and have had “experts” smiling and shrugging shoulders for months now.
  Thank You!

Leave a Comment