Block an IP accessing LAN

[cheops2006]

Hi,

I want to block a local ip(192.168.1.107) of accessing any other computers on my local LAN 192.168.1.1 -> 192.168.1.253 (192.168.1.254 is the router) on any port

I also want to block and local LAN computer accessing the above IP.

If someone could tell me how to do this that would be great.

Thanks

Ade.

[billion_fan]

Hi,

I want to block a local ip(192.168.1.107) of accessing any other computers on my local LAN 192.168.1.1 -> 192.168.1.253 (192.168.1.254 is the router) on any port

I also want to block and local LAN computer accessing the above IP.

If someone could tell me how to do this that would be great.

Thanks

Ade.

The only option is setting up a group isolation for this device, if its a Ethernet device, then you isolate it via port, or wireless, setup a virtual ssid for this device only.

Example of group isolation via port below

1. Click on Configuration >> LAN >> Interface Grouping
2. Click on 'Add'
3. Enter a 'Group Name' eg LAN1
4. Under 'Available LAN Interfaces' select your 'LAN port' and click on the arrow pointing left, so the LAN port should now be added to 'Grouped LAN Interfaces'
5. Click on 'Apply'
6. Under 'Group Isolation' tick the box and click on 'Apply'
7. Click on 'LAN >> Ethernet'
8. Under 'Group Name' select your isolated group you created in step 3 for this example I used 'LAN1' (very important)
9. Tick the 'LAN side firewall' option and click on 'Apply'
10 This device will now have a different IP address eg 192.168.2.x, which will not be able to login to the router, or access other devices that are connected to the main group (main group 192.168.1.x)

[cheops2006]

Thanks will the device still be able to access the internet?

[cheops2006]

This looks like it won't work for me as the computer is plugged into a switch and not directly in the router, Could I do it with IP filtering somehow?

Thanks

Ade.

[billion_fan]

This looks like it won't work for me as the computer is plugged into a switch and not directly in the router, Could I do it with IP filtering somehow?

Thanks

Ade.

Yes it will still have internet access

No IP filtering only effects the WAN to LAN or LAN to WAN, not LAN to LAN,