Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

We're currently using Netgear DGFV338 routers to provide VPN access to the office from home locations. But I don't think it can restrict access to the VPN tunnel based on MAC address.

Does anyone know of any router (within the same price range!) that can do:

  • ADSL(2+)
  • Wireless
  • VPN
  • Restrict access to VPN tunnel based on MAC address

The scenario being: I want to be able to use the VPN tunnel from my computer, but if a friend came over and connected his laptop to my home network, can I prevent him from using the VPN tunnel and only give him 'normal' internet access?

Is this possible?

EDIT: I'm looking for a hardware-only solution if possible. Other software solutions I've seen only work with Windows. I'm using a mix of operating systems at the remote end of the tunnel.

share|improve this question

2 Answers 2

up vote 1 down vote accepted

It sounds like you have a DGFV338 connected to your home DSL line, which bridges your entire home network with the office network. If you have a separate broadband modem, the solution is pretty straightforward--just put another router in between the modem and the DGFV338, and only let your friends connect to this new "public" router to get on the Internet.

You probably will also want to configure the public router on a different subnet than both your office network and your private router, because traffic from the private router may have trouble traversing the network otherwise.

Also note that the computers on your private network should be able to access anything on your public network, but computers on the public network should be blocked from the private network unless the DGFV338 is configured to route the other direction. This should be the case already, but you may want to confirm it before allowing anyone onto the public network.

share|improve this answer
    
Thanks Rob. Took a while to sink in, but makes sense now. Cheers. –  Steve Folly Oct 6 '09 at 18:28

The NetGear website suggests that your friend's laptop would have to have the NetGear software and a valid license installed and configured for your office network, so I don't think you need to filter based on MAC address.

The typical install scenario appears to be that you install the router at your office and install the VPN software on the employees' laptops or home computers. If this is your configuration, then it looks like it's handled via a software-based authentication scheme, and your friend's laptop won't be able to connect to the office router without installing the NetGear software and using your security credentials.

share|improve this answer
    
I'm not so sure. I've never installed the NetGear software, and all machines on the LAN have access to the tunnel. –  Steve Folly Oct 5 '09 at 21:42
1  
So you have a DGFV338 connected to your home DSL line, which bridges your entire home network with the office network? If you had a separate broadband modem, the solution would be simple--just put another router in between the modem and the DGFV338, and just let your friends connect to this new "public" router to get on the Internet. –  rob Oct 5 '09 at 21:49
    
Unfortunately the NetGear software only works on Windows PCs - we have a mix of other OSs as well. I've edited my question after you mentioned the software. I'm really looking for a pure hardware solution. –  Steve Folly Oct 6 '09 at 5:25
    
@rob: regarding adding an intermediate 'public' router, I understand this now and I think this is the solution. I can't accept this answer however, since it relates to a software solution. If you want to write another answer I'll up-vote it and make it the accepted answer. –  Steve Folly Oct 6 '09 at 9:22

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.