Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I know I can secure my WiFi via MAC address restrictions and WPA encryption.

I have a WiFi router without access restrictions and an Internet connection. I want to configure the router so that it should allow any user to connect over WiFi, but until I permit them they won't be able to use the Internet or engage in any sort of communication with other clients.

I would essentially be an administrator and would allow the users to use my resources, just like we connect to our ISPs.

Is this possible? Is there any software or tools available to do this?

share|improve this question
Do you mean that you want any user to be able to connect to the Wi-Fi access point, and be able to access the LAN and the internet, unless you manually blacklist them? – sblair Sep 7 '11 at 14:10
no i want only them to connect with router. Access is granted after my approval. Till then they will be only connected to wifi, without any access – Amit Ranjan Sep 7 '11 at 14:12
Means , I need a layer of admin approval between my internet and users. For example , you get registered with some website but until and unless the admin of that website approves you, you are called only as user, but without any access to its resource. I think i am much clearer now – Amit Ranjan Sep 7 '11 at 14:14
up vote 4 down vote accepted

There are a couple of technologies that will allow this. One is 802.1x plus RADIUS, but that is more geared towards an enterprise situation. The other is a called Captive Portal. That is more like what you see at a McDonalds or Starbucks or airport before you can get on the wifi there. You can get routers with a captive portal system for guest access, and iirc dd-wrt supports this.

share|improve this answer

You can do this with a router that supports Hotspot features such as a Captive Portal.

The captive portal technique forces an HTTP client on a network to see a special web page (usually for authentication purposes) before using the Internet normally. A captive portal turns a Web browser into an authentication device

See the article for a list of captive portal software.

share|improve this answer

Because they'd need your permission, you'd need to be able to do something to some tool to enable the access when the person asks.

Either you can use some of the internet access control systems most wireless routers come with (specifying who can access the internet and when), or use turn the MAC address blocking on and off based on whether they have your permission or not.

I think the MAC address blocking is probably the easiest to apply. No extra tools needed. Just log into your router and disable the block on his MAC address when he asks.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .