Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

With dd-wrt, can I give a computer on the network access to Internet, but prevent it from accessing anything on the LAN network, including the web interface of the dd-wrt router?

share|improve this question
I think the answer you are looking for is a VLAN. – JoshP Jun 29 '12 at 17:28
Indeed a VLAN is what you need, unfortunately, most home routers do not support this. – Jeff F. Jun 29 '12 at 17:56
@JeffF.though most, if not all, dd-wrt builds do – JoshP Jun 29 '12 at 19:04
Thanks. The computer in question is actually a VPN client, that is given a fixed IP when it connects. Is this a problem for VLAN, i.e. does it require it to be a physical computer? – sashoalm Jun 29 '12 at 19:46
It shouldn't be a problem that it is a VPN client. If you are running VPN server on the router, you can just set up different local subnet for the VPN clients than the physical machines on the network. Regardless of whether it is different or the same subnet, you can also add some firewall (iptables) rules to dd-wrt to restrict the access of that machine to the local network. – lupincho Jun 29 '12 at 19:53
up vote 0 down vote accepted

As Josh and Jeff F. mentioned, you will be able to limit access to LAN, but still allow access to the internet, once you configure a VLAN.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.