• July 14, 2025, 04:22:51 PM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: Restricting all but LAN access?  (Read 6938 times)

jgreiner

  • Level 1 Member
  • *
  • Posts: 3
Restricting all but LAN access?
« on: January 29, 2009, 11:09:43 AM »
I would like to configure the 655 so that a specific workstation on my LAN is restricted to communicating (in and out) only with other devices on the LAN.  I've fiddled around a bit with access control which I believe is the right solution, but needing some assistance.  Thanks! 
Logged

tipstir

  • Level 3 Member
  • ***
  • Posts: 136
    • Tipstir's LAN ZONE
Re: Restricting all but LAN access?
« Reply #1 on: January 29, 2009, 11:23:43 AM »
Quote from: jgreiner on January 29, 2009, 11:09:43 AM
I would like to configure the 655 so that a specific workstation on my LAN is restricted to communicating (in and out) only with other devices on the LAN.  I've fiddled around a bit with access control which I believe is the right solution, but needing some assistance.  Thanks! 

Would be better if you control shares on other PCs in your network so only certain users can access those shares on those PCs. Since by default shares are open to everyone that feature needs to be removed. You can block the that PC in question from accessing the network or internet. Block port=80, port=1900, port=5900 etc on that unit.
Logged
LAN Zone | Twitter @ tipstir | Youtube @ tipstir | Facebook @ tipstir

DIR-655 A3 1.11 APNs | DP-301U (3x)

Lycan

  • Administrator
  • Level 15 Member
  • *
  • Posts: 5335
Re: Restricting all but LAN access?
« Reply #2 on: January 29, 2009, 11:55:02 AM »
you can not restrict LAN to LAN traffic with that router.

Logged

EddieZ

  • Level 10 Member
  • *****
  • Posts: 2494
Re: Restricting all but LAN access?
« Reply #3 on: January 29, 2009, 12:20:54 PM »
Yep, you need to restrict internet access on the client (Windows) itself (set a policy).
I am not sure, but with the Acces Control you perhaps can block the machine from accessing the IP that is statically set on your internet gateway/modem (for ex. the modem IP 192.168.1.256 or, in my case at home 192.168.1.64, which is assigned by the gateway and entered in the DIR setup as the internet IP). Haven't tried it out, but you could give it a go.
Logged
DIR-655 H/W: A2 FW: 1.33

keithrobson

  • Level 1 Member
  • *
  • Posts: 1
Re: Restricting all but LAN access?
« Reply #4 on: January 30, 2009, 01:54:37 AM »
You need to set up an access policy with the Machine set to the MAC address of the PC and Filtering set to Block all access.

I do that for my daughter's PC on a scheduled basis (off at 11pm)
Logged

ttmcmurry

  • Level 4 Member
  • ****
  • Posts: 438
Re: Restricting all but LAN access?
« Reply #5 on: January 30, 2009, 04:28:28 PM »
If your daughter has Windows Vista, you can set the parental controls to allow login between specific hours.

Start -> Control Panel -> (All Control Panel Items) -> Parental controls -> Click on the user, turn on controls and specify the time limits to which she can log in.

I'm a little hazy if this is a Windows 7 feature or a Windows Vista feature (I'm running 7) -- but you can also install additional controls on the Parental Controls page if you scroll down to the bottom .. things like website filtering and activity monitoring. 

If you're on XP, it's probably easier to enforce only the internet access via the router.  First, create a Schedule first under Tools, then create the access policy.  Make sure when you set the access policy you choose the MAC address of her computer since the IP can either change on its own if you use DHCP, or she may get smart and choose a manual IP address. 
Logged