Using a WRT54GS WIFI Router as an 'internal network only AP'

Toggle sidebar Toggle sidebar
B

borneoman

Commendable
Oct 4, 2016
5
0
1,510
I have a Linksys WRT54GS WIFI Router that I want to use to allow users to connect to my network - file sharing etc. But i dont want them to be able to access the Internet which is available on the rest of the network.

Is there a way to configure the AP to allow those connected to access my shared files (and programmes like Calibre) and not gain access to the Internet.

I am very sorry if this has been answered elsewhere - I have searched but in vain. Thank you for your help.
 
Solution
B
I forget exactly how you put the rule in dd-wrt since they have changed the screens. You should be able to put in a firewall rule that only allows that single ip and that port if your really want. You would still put in a deny all rule and then allow just that one.
Sort by date Sort by votes
B

bill001g

Titan
Aug 9, 2012
28,318
2,754
125,640
That is a old router most people have put in the trash but it was very popular back in the day.

Your question is actually the reverse most people want a guest network to allow people to only access the internet but not the local.

So..you don't want to run the device as AP there is no way to control the traffic, you will need to run the device as a router. You will have to share the files by actually specifying the IP address it will not come up on a list because that is dependent on being on the same lan. But if you run it on the same lan you can not restrict them.

Its been a long time since I used that router. There are a couple ways. First on the wan port change the default gateway to some ip other than the ip of your actual main router. This would mean your secondary router does not know where the internet is so the user could not access it.
If it does not allow that then it must have some type of firewall rule that lets you specify that only traffic to the internal network is allowed.

You might also have the option of loading dd-wrt on that router. Problem is that router is so old it is hard to find images that will fit in the memory. DD-wrt has firewall rules and would give you other options.

 
Upvote 0 Downvote
B

borneoman

Commendable
Oct 4, 2016
5
0
1,510
The port change for the default gateway would not work...It just wouldn't allow me to configure invalid settings.... However I have managed to reconfigure my router with the DD-WRT - a real learning curve, but it works. However I still don't see what I can do here to configure the router to share an internal network address over the wlan and NOT the Interent. The interface options look very similar to what the Linksys firmware offered. Can you offer any further advice please...I appreciate your help.
 
Upvote 0 Downvote
B

bill001g

Titan
Aug 9, 2012
28,318
2,754
125,640
In dd-wrt put in default deny rule. This will cause all traffic to be block. Then allow just access to just 192.168.x.x network that represents your internal network.


The wan ip trick should work on dd-wrt. Lets say you network is 192.168.1.x. Assign it a ip like 192.168.1.100 (something outside the dhcp range of the main router). Then in the gateway put in 192.168.1.253.....or any other unused address.
 
Upvote 0 Downvote
B

borneoman

Commendable
Oct 4, 2016
5
0
1,510
Thanks again... I have one added problem. The linksys router is in the 192.168.1.X range but my internal network is 10.98.X.X range. I can't open a 10. range address in router. Basically the main thing is if I could give those connected to the linksys router (with the 192 range) access only to the one address 10.98.240.30:8080 (which is a machine with shared files etc) then I will be happy.... other options are not so important. Any other suggestions? Thanks.
 
Upvote 0 Downvote
B

bill001g

Titan
Aug 9, 2012
28,318
2,754
125,640
I forget exactly how you put the rule in dd-wrt since they have changed the screens. You should be able to put in a firewall rule that only allows that single ip and that port if your really want. You would still put in a deny all rule and then allow just that one.
 
Upvote 0 Downvote
Solution
You must log in or register to reply here.

TRENDING THREADS

Latest posts

Moderators online

Share this page

COMPANY
RESOURCES
FOLLOW
Top Bottom