AVSIG: WAN Only? wwswsigarch.jpg (7236 bytes)

✈ . . . . . . ✈ . . . . . ✈ . . . . ✈ . . . ✈ . . ✈ . ✈ . . ✈ . . . ✈ . . . . ✈ . . . . . ✈ . . . . . . Touch-and-Go to our Live Forum (This is a Read-only Archive of the 2004-2017 AVSIG Forum)


AVSIG Discussion Sections >> Hardware/Software

Pages: 1 | 2 | >> (show all)
Ray Tackett
Top Gun


Reged: 04/30/04
Posts: 8892
Loc: Philadelphia, USA
WAN Only?
      #432108 - 10/28/16 05:08 PM

I know how to lock devices out of my router completely. I know how to lock
devices on the local netword (LAN) out of the internet (WAN), which I do with
my local backup servers.

Is there a way to lock a device out of the LAN and still let it use WAN? For
example, I have a guest in the house who wants a wireless WAN connection.
Fine, but if there's a way to keep the guest's device from seeing other LAN
devices, I'd like to implement it.

In case it helps, my router is a Verizon-provided Actiontec.

--------------------
Ray,

Owner, Lake Wood Be Gone

Turning quality lumber into sawdust and noise since 2013.


Post Extras: Print Post   Remind Me!   Notify Moderator  
Mase Taylor
Top Gun


Reged: 04/29/04
Posts: 9446
Loc: SOCAL
Re: WAN Only? [Re: Ray Tackett]
      #432111 - 10/28/16 06:14 PM

If you are using a workgroup, can you exclude the guest from the workgroup, thus preventing access to the other devices?

--------------------
Fly The Airplane As Far Into The Crash As Possible. - Bob Hoover 1922-2016 R.I.P.


Post Extras: Print Post   Remind Me!   Notify Moderator  
Russell Holton
AVSIG Member


Reged: 07/07/05
Posts: 14136
Re: WAN Only? [Re: Ray Tackett]
      #432114 - 10/28/16 06:35 PM

Quote:

Is there a way to lock a device out of the LAN and still let it use WAN? For example, I have a guest in the house who wants a wireless WAN connection.
Fine, but if there's a way to keep the guest's device from seeing other LAN devices, I'd like to implement it.




It all depends on the feature set of the router. I have seen home routers that allow WiFi devices to have access to the Internet, but no access to the wired LAN. I think that's what you're looking for.

I'm not sure as I've seen one that can set that at the device level.


Post Extras: Print Post   Remind Me!   Notify Moderator  
Ray Tackett
Top Gun


Reged: 04/30/04
Posts: 8892
Loc: Philadelphia, USA
WAN Only? [Re: Mase Taylor]
      #432119 - 10/28/16 07:29 PM

I am using a workgroup because I don't want to keep a domain server sucking
power all the time. The workgroup name would be unknown to the guest. Good
point, but devices may still be visible via "ping 192.168.1.xxx" where xxx is
greater than 001.

--------------------
Ray,

Owner, Lake Wood Be Gone

Turning quality lumber into sawdust and noise since 2013.


Post Extras: Print Post   Remind Me!   Notify Moderator  
Ray Tackett
Top Gun


Reged: 04/30/04
Posts: 8892
Loc: Philadelphia, USA
WAN Only? [Re: Russell Holton]
      #432120 - 10/28/16 07:29 PM

I'll check for that feature. I have only one LAN/workgroup device which uses
WiFi routinely. I can cobble up a cable for it, though. I have plenty of
space on the switch.

Thanks.

--------------------
Ray,

Owner, Lake Wood Be Gone

Turning quality lumber into sawdust and noise since 2013.


Post Extras: Print Post   Remind Me!   Notify Moderator  
sreyoB yrraL
AVSIG Member


Reged: 05/16/04
Posts: 9442
Re: WAN Only? [Re: Ray Tackett]
      #432140 - 10/29/16 11:55 AM

Use two routers.

The first one "Router A" (connected to the cable/DSL modem) provides the "Public" wifi. The second one "Router B" is connected to LAN port of the first router and provides the LAN. The firewall in Router A protects both sub-networks from attacks from outside the house. The firewall in Router B protects the LAN from anything connected to Router A's sub-network.

As has been mentioned, some routers have this functionality (for a separate public sub-network) built in.


Post Extras: Print Post   Remind Me!   Notify Moderator  
Ray Tackett
Top Gun


Reged: 04/30/04
Posts: 8892
Loc: Philadelphia, USA
WAN Only? [Re: sreyoB yrraL]
      #432142 - 10/29/16 02:05 PM

Thanks. Now I need to consider whether that much paranoia justifies the cost
of a router :)

--------------------
Ray,

Owner, Lake Wood Be Gone

Turning quality lumber into sawdust and noise since 2013.


Post Extras: Print Post   Remind Me!   Notify Moderator  
sreyoB yrraL
AVSIG Member


Reged: 05/16/04
Posts: 9442
Re: WAN Only? [Re: Ray Tackett]
      #432145 - 10/29/16 03:26 PM

You don't need a fancy one.

https://www.amazon.com/NETGEAR-RangeMax-...eywords=routers


Post Extras: Print Post   Remind Me!   Notify Moderator  
John O'Shaughnessy [FCM]
Top Gun


Reged: 09/13/01
Posts: 5059
Loc: Minnesota
Re: WAN Only? [Re: Ray Tackett]
      #432195 - 10/30/16 12:18 AM

Quote:

Is there a way to lock a device out of the LAN and still let it use WAN?




Yes, but...

Most consumer routers don't support it.

Most consumer devices consist of a router/switch/firewall/WiFi Access Point. Getting all of those features in a single box, often for under $100 is really quite impressive compared to the equipment required to put that together 20 years ago.

What you need is the capability to add a second LAN network that can be routed to the WAN (and vice-versa) but not routed to the other local LAN network. Some router firmware can handle that. I'm not familiar with your device, and whether it can do that.

The only other hope is to check to see if your router supports a separate "Guest" network. Often that is a pre-canned method to do the same thing.

ASUS routers, for example, support this. https://www.asus.com/support/faq/1009857


John


Post Extras: Print Post   Remind Me!   Notify Moderator  
Terry Carraway
Top Gun


Reged: 06/02/04
Posts: 7098
Loc: Maryland
Re: WAN Only? [Re: Ray Tackett]
      #432202 - 10/30/16 06:35 AM

Do you have Comcast with their router?

If so, you already have a public wifi, whether you want to or not. :)

--------------------
Terry
Mostly 0W3


Post Extras: Print Post   Remind Me!   Notify Moderator  
Pages: 1 | 2 | >> (show all)



Extra information
0 registered and 120 anonymous users are browsing this forum.

Moderator:  Mike Overly 

Print Topic

Forum Permissions
      You cannot start new topics
      You cannot reply to topics
      HTML is disabled
      UBBCode is enabled

Rating:
Topic views: 2999

Rate this topic

Jump to

Contact Us AVSIG

Powered by UBB.threads™ 6.5.5

Logout   Main Index    AVSIG Aviation Forum