1

I want to prevent users from accessing the Internet through a wired connection to my router. How do I protect this?

I have a Belkin G+ MIMO 4-port Router with the following version info:

Firmware Version  1.00.02 (Jul 31 2008 22:32:20)
Boot Version      V0.13         
Hardware          F5D9231-4v1(01)   
Serial No.      12838923107956
  • 4
    well, if you'll never need to use them you could fill them with resin or take cut off or un-used cable ends and glue them into the ports. but that may be a little extreme – Xantec Dec 10 '10 at 17:22
  • just fill your LAN-Ports with hot glue or silicone ;) – schöppi Dec 10 '10 at 19:50
3

You could lock the router in a box, with holes cut out for the antennae and hard-wired internet connection. Of course, someone could always just unplug your router from the wall and plug their computer directly on the internet port. So unless you're going to keep the router in a locked room, or put some sort of locking cover/cabinet over the internet port in the wall, this may be an exercise in futility.

| improve this answer | |
1

What we do at work is put the router in a locked room (that's where are intenet connection resides). Voila, no wired access.

| improve this answer | |
1

Maybe you might consider turning off the DHCP on your router, then set the IP address scheme to something a little strange - say 192.168.55.15 for the internal IP address. If they don't know the address scheme and don't know the gateway address, that should stop them.

| improve this answer | |
  • This is interesting. How would this affect wireless users? – Jacob Dec 11 '10 at 1:41
  • Same. They may see your SSID, but without DHCP, they would have to know how to manually configure their IP settings to get in and would need to know what IP address the gateway is at and what IP scheme to use. – Blackbeagle Dec 16 '10 at 10:08
  • Note that this will not work if you use no (or crackable) encryption since the IPs and MAcs will be sent over the air and can be picked up by anyone. – Hennes Feb 9 '16 at 9:49
1

Assuming you're looking for a software option, you could try using a domain on your network, and only allow network or Internet access from the domain. In order to join the domain, you'd need a username/password, making anonymous access not possible.

| improve this answer | |
0

Look for MAC filtering in your router's settings. It's by any means not a foolproof method, but normal users won't know what to do.
Just add a list of allowed MAC (all devices you want to allow to connect through a wire) and block all others.

| improve this answer | |
  • 1
    This may depend on the router. In my old Linksys, and my new Netgear, the MAC filter is specific just to the wireless connections. There is no MAC filter section for wired connections. – eidylon Dec 10 '10 at 20:49
0

This answer on Server Fault mentions RJLockdown (manufacturer) which looks like it might be useful.

RJLockdown

| improve this answer | |
  • This is interesting because the OP of the referenced post talks about disabling a port. Is there a software way to disable a TCP/IP port on the router? – Jacob Dec 11 '10 at 20:09
  • 1
    @P23: The factory firmware doesn't seem to support this. If you can find alternative firmware that supports your model, you may be able to disable the ports or create a dead-end VLAN. While DD-WRT doesn't appear to support your model, here is a discussion if its VLAN features. They do support other Belkin models so you might see if future support is planned for yours. – Paused until further notice. Dec 11 '10 at 21:32
-1

While not overly effective, you can block the average user from connecting via wired or wireless if you filter by MAC address. If you want people to be able to access using wireless, then go with eidylon or xantec's suggestion.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.