Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have multiple networks and I use basic Cisco routers (Linksys E2500) at each.

I allow users to use the Wifi, but my computers are wired in, and I'd like to somehow prevent users from using their PCs/Laptops and hooking up a wired connection.

How do I prevent users from hooking wired devices to a router?

Given that I do allow use of the Wifi, I can't turn off DHCP and go with static addresses, so that's out.

share|improve this question
1  
Do you have a domain? –  Brad Patton Mar 25 '13 at 19:57
    
No, and if so I would of course utilize my options there. Each of our locations is on it's own LAN. –  Moses Mar 25 '13 at 19:58
    
I don't think this is possible. There's a thread on the Linksys forums about this as well, and the conclusion there is to physically secure the router/prevent access. –  ernie Mar 25 '13 at 19:59
2  
Good man :) I think your best bet is either an active domain of sorts, or else you will manually need to whitelist/blacklist MAC addresses (not all routers support this, so you may need custom firmware as Kruug mentions below). Even that has easy ways around it though, so running custom lines is an option @techie007 mentions; however, all the empl.. I mean visitors would need are passive splitters. There's no silver bullet, but any or all those measures would do the majority of the work for the "average user" type of guest. –  nerdwaller Mar 25 '13 at 20:17
add comment

4 Answers

up vote 7 down vote accepted

Couple/few ideas to consider:

  • Separate your Wifi network from your wired network, with separate IP and DHCP scopes.
  • Get routers that support black/whitelisting.
  • Unplug any jacks that are not in use at the switch/router, and lock the switch/router in a closet. If someone needs one they can buzz you to arrange to get it activated.
share|improve this answer
    
This is probably my best option. I'll get a better router, separate subnets for Wifi and wired, and deactivate unused ports. Thanks –  Moses Mar 25 '13 at 20:24
add comment

RJLOCKDOWN sells jack locks for RJ-45 ports that physically prevent plugging an Ethernet cable into the router.

jack lock

RJ 45 Jack Locks can give you the extra physical security that you need. Our customers use our jack locks in a variety of locations.
For example blocking unused ports on a switch to prvent [sic] unauthorized access.

share|improve this answer
4  
seriously ? an allen key ? –  Sirex Mar 26 '13 at 0:49
add comment

MAC Address filtering comes to mind, as does turning off the ports not in use. Not sure if the E2500's can do this stock, maybe check out DD-WRT or Tomato?

share|improve this answer
add comment

Keep anything that exposes ports in a locked closet or room. This is pretty much how, say, Starbucks Coffee prevents you from using their ports while allowing Wi-Fi.

If you have sufficiently configurable switch, you can selectively power down ports. So even if you provide ports to junction boxes in rooms, those can be disabled.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.