I think my wording was confusing. Nobody will connect to this router via the wired LAN ports. We already have a wired network for that. What I want to accomplish is to create a wireless network that gets people to the internet, but denies any attempts to communicate on the local network.
It looks like I might be able to accomplish this by:
1. Setting a different IP range for the DIR-655. I gave it a 10.0.0.0 range, whereas the local network is 192...
2. Use Access Control under the Advanced tab to deny the entire 192... range of IP addresses.
I just set it up like this an it appears to be working. Wifi gets internet, but can't talk to the local network.
I don't know if this is the best way to achieve this goal, so if there's another way or a better solution, I'd love to hear about it.
Thanks!
a