Disable internet but allow phone connection?

[cameronlite]

It does seem a little extreme...

I'm pretty sure my router doesn't support that feature

[peterb]

Tieing MAC address to IP in the DHCP server would be a good start and making it mandatory would mean that he HAS to spoof MAC addresses. Of course, he could then just use his mate's PC.

[badass]

Of course, he could then just use his mate's PC.

Which, TBH is simply his mate letting him use what his mate has paid for.

cameronlite, I think you've found the best solution in the circumstances. MAC lockdown and WPA2-PSK encryption with a strong password.

I'm sad enough that I actually use a PKI and certificates for my WiFi but I suspect that would be massive overkill for you

[Splash]

If he does have friends in the flat whpo would give him the password, there isn't much you can do, other than setting up the password on their machines without them knowing it - which they might not be willing for you to do.

Be aware if doing this that there are applications out there that you could run on a connected machine to tell you what the passcode is for the WLAN.

[Agent]

The problem with MAC lockdown is that every new phone, laptop and mobile device needs to be added. If friends / girlfriends are visiting, this can quickly become a pain to admin.

[cameronlite]

The problem with MAC lockdown is that every new phone, laptop and mobile device needs to be added. If friends / girlfriends are visiting, this can quickly become a pain to admin.

I'll have everybodies mac address - it won't be mac secured until somebody stops paying for it. Assuming he never pays, then yes, I could see that being an issue.

The encryption isn't to stop him - that's mac address filtering.