Results 1 to 11 of 11

Thread: How can I block an access point from PCs on same LAN

  1. #1
    Registered+
    Join Date
    Aug 2008
    Location
    Derby
    Posts
    60
    Thanks
    24
    Thanked
    1 time in 1 post

    Question How can I block an access point from PCs on same LAN

    How can I stop connections that come in via my Netgear WG602 Access Point from being able to see the PCs on my LAN?
    I have:-
    - a Netgear DG834 broadband router set to 192.168.0.1
    - a 5 way hub plugged into the DG834 with PCs in the range 1921.168.0.2 to 192.168.0.10
    - a Netgear WG602 set at its default 192.168.0.227 also plugged into the DG834.

    I have got the system working with SSID + MAC Address Authentication + WEP encryption and my Wii can connect to the internet but I want to make sure that if anyone connects to the WG602 that they cannot see the PCs or their shared directories.
    EDIT - I meant WPA2-PSK encryption (not WEP)

    Can this be done by changing the settings in the DG834 or WG602 or do I need to add another firewall/router between the WG602 and the rest of my LAN? Can anyone help?

    p.s. By definition I cannot be paranoid because I know they are after me!
    Last edited by Greenbandit; 24-05-2009 at 12:39 AM. Reason: Encryption type corrected

  2. #2
    Jay
    Jay is offline
    Gentlemen.. we're history Jay's Avatar
    Join Date
    Aug 2006
    Location
    Jita
    Posts
    8,364
    Thanks
    304
    Thanked
    568 times in 409 posts
    • Jay's system
      • Motherboard:
      • ASUS P5Q Deluxe
      • CPU:
      • Intel Q6600 G0 @ 3.0GHz with Corsair H50
      • Memory:
      • 8GB Corsair XMS Pro DDR2 800MHz 5-5-5-12
      • Storage:
      • 128GB Crucial RealSSD
      • Graphics card(s):
      • Sapphire VaporX HD4890 1GB
      • PSU:
      • 720W Enermax Infinity
      • Case:
      • Fractal Design Define R3 Black Pearl
      • Operating System:
      • Windows 7 Pro
      • Monitor(s):
      • 2 x Samsung 22" 226BW V2 (3360 x 1050)
      • Internet:
      • O2 / Cisco ASA 5505

    Re: How can I block an access point from PCs on same LAN

    you could put it on a different subnet
    □ΞVΞ□

  3. #3
    Senior Member watercooled's Avatar
    Join Date
    Jan 2009
    Posts
    10,766
    Thanks
    1,495
    Thanked
    925 times in 796 posts

    Re: How can I block an access point from PCs on same LAN

    If the people in question dont need access to you network (or shouldn't be on there) I'd strongly recommend setting up WPA (not WEP which can be very easily broken) with a strong password which will prevent anyone gaining unauthorised access to your network. If they are allowed on your network then all I can think of is setting up a different subnet (as mentioned above^), password-protecting file sharing (I think it's possible but I'm not exactly sure how to do it) or putting another router between your existing router and your AP.
    For a strong random WPA password, I recommend: https://www.grc.com/passwords.htm and use the middle password. You will probably want to put it on a USB drive to transfer it between PCs.

  4. #4
    Registered+
    Join Date
    Aug 2008
    Location
    Derby
    Posts
    60
    Thanks
    24
    Thanked
    1 time in 1 post

    Re: How can I block an access point from PCs on same LAN

    Quote Originally Posted by Jay View Post
    you could put it on a different subnet
    Yes that was my 1st thought, I tried the WG603 set to 192.168.0.128 but since subnet masks seem to need contiguous bits set to zero, I could not find what subnet mask would allow both the PCs and the WG603 to both see the 192.168.0.1 gateway but not see each other.

    Quote Originally Posted by watercooled View Post
    If the people in question dont need access to you network (or shouldn't be on there) I'd strongly recommend setting up WPA (not WEP which can be very easily broken) with a strong password which will prevent anyone gaining unauthorised access to your network. If they are allowed on your network then all I can think of is setting up a different subnet (as mentioned above^), password-protecting file sharing (I think it's possible but I'm not exactly sure how to do it) or putting another router between your existing router and your AP.
    For a strong random WPA password, I recommend: https://www.grc.com/passwords.htm and use the middle password. You will probably want to put it on a USB drive to transfer it between PCs.
    Sorry I meant WPA. There should be no-one accessing the WAP, but since there are 2 main roads, many houses & 4 other networks within its range, I like to cover all possibilities.

    I already have password protection on the shares (except of course from the C$ default shares that I'm not sure how to disable). I work on the basis that until I know it is impossible to access the files on my PCs via the WAP, I take the "if it can happen, act as if it will happen" approach to security.

    I think your extra router idea is the way forward but I don't want to spend more cash until I know it is the only way forward. I'm still looking through the DG834 setup options in case it can do it. I'm bored already with reading through Netgear help pages & networking articles, but I'm not giving up yet.

    & thanks for the GRC password page link - I had missed that page.

  5. #5
    Seething Cauldron of Hatred TheAnimus's Avatar
    Join Date
    Aug 2005
    Posts
    17,147
    Thanks
    798
    Thanked
    2,151 times in 1,407 posts

    Re: How can I block an access point from PCs on same LAN

    If ur really parinoid about this stuff, consider using a spare/old box as a http://m0n0.ch/wall/ ?
    throw new ArgumentException (String, String, Exception)

  6. #6
    Admin team peterb's Avatar
    Join Date
    Aug 2005
    Location
    Southampton
    Posts
    19,162
    Thanks
    2,790
    Thanked
    3,338 times in 2,641 posts
    • peterb's system
      • Motherboard:
      • Nascom 2
      • CPU:
      • Z80B
      • Memory:
      • 48K 8 bit memory on separate card
      • Storage:
      • Audio cassette tape - home built 5.25" floppy drive
      • Graphics card(s):
      • text output (composite video)
      • PSU:
      • Home built
      • Case:
      • Home built
      • Operating System:
      • Nas-sys
      • Monitor(s):
      • 12" monocrome composite video input
      • Internet:
      • No networking capability on this machine

    Re: How can I block an access point from PCs on same LAN

    You could get a router that has a specific setting that prevents users who are accessing the router through the wireless link from seeing the internal network. Some Draytek routers have tat facility.

    You could also consider setting up a vpn to your network which would give an additional level of authentication and privacy protection.
    (\__/)
    (='.'=)
    (")_(")

    Been helped or just 'Like' a post? Use the Thanks button!
    My broadband speed - 750 Meganibbles/minute

  7. #7
    Registered+
    Join Date
    Aug 2008
    Location
    Derby
    Posts
    60
    Thanks
    24
    Thanked
    1 time in 1 post

    Re: How can I block an access point from PCs on same LAN

    Quote Originally Posted by TheAnimus View Post
    If ur really parinoid about this stuff, consider using a spare/old box as a http://m0n0.ch/wall/ ?
    I will keep looking to see if the DB834 or WG602 have setting that let me do what I want with no extra hardware, but in the meantime I have ordered an £8 4GB solid state SATA drive to fit in a spare box to try the m0n0.ch way forward.

    Quote Originally Posted by peterb View Post
    You could get a router that has a specific setting that prevents users who are accessing the router through the wireless link from seeing the internal network. Some Draytek routers have that facility.

    You could also consider setting up a vpn to your network which would give an additional level of authentication and privacy protection.
    The router idea exactly what a mate at work said. The problem with the VPN idea as I see it is that it would prevent me from using shared diredtories between my existing 4 PCs, or have I missed a trick here? My problem is not so much that I could not sort it by replacing my existing broadband router or by adding an extra router between the DG834 and the WG602, the problem is that I want to be a flash git and sort it by setting up the kit that I already have instead of spending more cash. I am only in this situation because I wanted to get my Wii online, and lets be honest, getting a Wii online does not really achieve anything of real value.

    I am just being sad by wanting to be able to sort the problem. I was hoping that someone would say something like "I managed that, all it takes is....."

  8. #8
    Registered+
    Join Date
    Aug 2008
    Location
    Derby
    Posts
    60
    Thanks
    24
    Thanked
    1 time in 1 post

    Re: How can I block an access point from PCs on same LAN

    Quote Originally Posted by peterb View Post
    Is YOUR system up to Folding?
    Actually yes they are but having a world rank of 99.1% on BOINC I don't want to move over to a different system

  9. #9
    WEEEEEEEEEEEEE! MadduckUK's Avatar
    Join Date
    May 2006
    Location
    Lytham St. Annes
    Posts
    17,293
    Thanks
    649
    Thanked
    1,580 times in 1,006 posts
    • MadduckUK's system
      • Motherboard:
      • Asus A88XM-PLUS
      • CPU:
      • AMD 860K @4.45
      • Memory:
      • 16GB (4x4GB) PC3-12800
      • Storage:
      • 1x240GB Sandisk Extreme / 3x500GB RAID0 / 3GB Backup
      • Graphics card(s):
      • Radeon 7870XT
      • PSU:
      • Corsair TX750w
      • Case:
      • Cooler Master Galdiator 600
      • Operating System:
      • Windows 10 x64
      • Monitor(s):
      • DELL S2409W
      • Internet:
      • 3 One Plan

    Re: How can I block an access point from PCs on same LAN

    Quote Originally Posted by peterb View Post
    You could get a router that has a specific setting that prevents users who are accessing the router through the wireless link from seeing the internal network. Some Draytek routers have tat facility.
    Wireless Isolation, my DG834N can do it, but no idea if its implemented across the rest of the range.
    Quote Originally Posted by Ephesians
    Do not be drunk with wine, which will ruin you, but be filled with the Spirit
    Vodka

  10. #10
    Jay
    Jay is offline
    Gentlemen.. we're history Jay's Avatar
    Join Date
    Aug 2006
    Location
    Jita
    Posts
    8,364
    Thanks
    304
    Thanked
    568 times in 409 posts
    • Jay's system
      • Motherboard:
      • ASUS P5Q Deluxe
      • CPU:
      • Intel Q6600 G0 @ 3.0GHz with Corsair H50
      • Memory:
      • 8GB Corsair XMS Pro DDR2 800MHz 5-5-5-12
      • Storage:
      • 128GB Crucial RealSSD
      • Graphics card(s):
      • Sapphire VaporX HD4890 1GB
      • PSU:
      • 720W Enermax Infinity
      • Case:
      • Fractal Design Define R3 Black Pearl
      • Operating System:
      • Windows 7 Pro
      • Monitor(s):
      • 2 x Samsung 22" 226BW V2 (3360 x 1050)
      • Internet:
      • O2 / Cisco ASA 5505

    Re: How can I block an access point from PCs on same LAN

    if all else fails get a cheap Cisco switch fro ebay a use a VLAN
    □ΞVΞ□

  11. #11
    Registered+
    Join Date
    Aug 2008
    Location
    Derby
    Posts
    60
    Thanks
    24
    Thanked
    1 time in 1 post

    Re: How can I block an access point from PCs on same LAN

    I have pulled up the DG834N manual & I can see the setting that isolates the wireless from the rest of the LAN It would have worked if the DG834 was the same, but it isn't But the idea was spot on.

    I think a cheap switch/router is the answer. Ebay here I come.

    Thanks for the ideas peeps.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Using a Windows Laptop as a Wireless Access Point - is it possible?
    By GingerNinja.net in forum Help! Quick Relief From Tech Headaches
    Replies: 10
    Last Post: 14-06-2007, 10:14 AM
  2. Wireless access point probs - recommendations
    By M0nkeyb0Y in forum Help! Quick Relief From Tech Headaches
    Replies: 9
    Last Post: 06-04-2007, 01:03 AM
  3. Lowest Price WiFi Access Point (54mb) please?
    By CocoPops in forum Retail Therapy and Bargains
    Replies: 4
    Last Post: 12-10-2003, 02:28 PM
  4. Wireless Access point £23
    By daveham in forum Retail Therapy and Bargains
    Replies: 5
    Last Post: 12-09-2003, 11:30 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •