Wireless Network How to Allow LAN but Block WAN?

crawly462

Reputable
Feb 9, 2015
3
0
4,510
Hi there,

I've been going around in circles with this, but on my home network, which consists of an Asus WL-520GU wireless router, how can I allow some people to connect to it wirelessly and have access to the NAS (LAN) but block them from accessing the Internet (WAN)?

The problem is, I have satellite Internet and have a data limit of 30GB/Mo. I have relatives come over and connect to our network and want to use it like they are used to using the internet, with no limits. Unfortunately, they leave the next day having used up 10 days worth of data in a few hours. (I've tried explaining it to them, but it just doesn't sink in, or they say they barely were on it...) I have installed a NAS, so when they are bored they can watch a movie, but that means I have to give them access to the wifi to get to the NAS. How can i allow access to the LAN but block them from the WAN?

They will be using wifi devices, for example, phones, tablets...

Oh, and I can't just disconnect the router from the Internet (WAN) as I still want to be able to get to the Internet from my phone and laptop.

Your thoughts on this would be appreciated.
 
That is a very old router so I am not sure how many of the asus firewall feature it supports. The goal is to match the mac/ip of your devices and allow them to access all ip and block all the others. The newer asus routers this is fairly easy but you do not even have a N router so hard to say.

The only good thing about your router is it says it is dd-wrt compatible. DD-WRT has very advanced firewall options. It will also give you the options to put in multiple wireless networks with different permissions. Be care guest wireless by default work exactly backwards to what you want. It will normally allow internet but no lan access. dd-wrt tends to feel overwhelming when you start because it has so many options but there are lots of examples to help.
 

crawly462

Reputable
Feb 9, 2015
3
0
4,510
It is an old router, and actually the only reason I still use it is because it has a USB port that I can connect my laser printer to and make it a network printer. I was looking into the dd-wrt firmware, but I was worried that I'd lose the use of usb to share the printer, and not sure if it would do the blocking that I want. I've played around with the MAC address filtering, but it seems that if I allow a device to connect, it has access to both LAN and WAN. Here is a stretch, but is there some firmware (dd-wrt, tomato...) that has both Wireless MAC filtering and separate WAN MAC Filtering? I think it would have to be MAC filtering as the router is handing out random ip addresses to these devices and it could change from day to day.


 

crawly462

Reputable
Feb 9, 2015
3
0
4,510


I thought a guest network would do pretty much the opposite of what I want, but because you said "by default" I looked up configuring a guest network and there is something about using dd-wrt that might do the trick. It appears to be configuring the dd-wrt option of using multiple wireless networks to make your own "guest network" that are separate from each other. I'm trying to read through it and see if it will work because the sharing of the NAS between the main network and the guest network may be tricky. Also it looks like a micro-usb build of dd-wrt would install on this Asus router, I guess it would have the multiple wireless network features in it. I'm trying to find out if it does.....