D-Link Forums

The Graveyard - Products No Longer Supported => Routers / COVR => DIR-615 => Topic started by: eXtremer on November 30, 2010, 02:44:20 AM

Title: Isolate one IP (computer) from the rest of the LAN
Post by: eXtremer on November 30, 2010, 02:44:20 AM
Hi all.
So, my boss asked me to give internet access to one person that is not part of our company, I would like to isolate his computer from the rest of the LAN so he would not be able to access information from other computers. How it's possible to do this and which is the best method ?
Thank you in advance.

Product Page: DIR-615
Hardware Version: B2
Firmware Version: 2.26RU
Title: Re: Isolate one IP (computer) from the rest of the LAN
Post by: buckm on November 30, 2010, 05:49:09 AM
try putting that device into the dmz
Title: Re: Isolate one IP (computer) from the rest of the LAN
Post by: stonetownmike on November 30, 2010, 10:17:22 AM
try putting that device into the dmz
That doesn't make any sense to me. Placing a device in the DMZ exposes it to the internet without any firewall protection. I don't think that's what you want to do.
Title: Re: Isolate one IP (computer) from the rest of the LAN
Post by: eXtremer on November 30, 2010, 10:45:42 PM
That doesn't make any sense to me. Placing a device in the DMZ exposes it to the internet without any firewall protection. I don't think that's what you want to do.

Actually I don't care what happens with that computer, so as long as this solves the issue I'll do it.
Title: Re: Isolate one IP (computer) from the rest of the LAN
Post by: eXtremer on December 01, 2010, 05:54:24 AM
I added the IP to the DMZ but nothing changed, the computer still has access to the LAN, I actually don't understand what DMZ does, worthless. So what I did, just made a firewall rule on the clients machine denying access to 192.168.0.2-192.168.0.254 range, allowing only 192.168.0.1 (router).
btw is there a newer firmware version for my router ?

Product Page: DIR-615
Hardware Version: B2
Firmware Version: 2.26RU

Thank you.
Title: Re: Isolate one IP (computer) from the rest of the LAN
Post by: smlunatick on December 06, 2010, 10:25:19 AM
DIR-615 does not allow multiple "networks."  As long as a PC receives a "LAN" IP address, it will access the entire network.  You might need to look at a different router, one with a separate "guest" network that can be separated from the true network.