2

I have multiple networks and I use basic Cisco routers (Linksys E2500) at each.

I allow users to use the Wifi, but my computers are wired in, and I'd like to somehow prevent users from using their PCs/Laptops and hooking up a wired connection.

How do I prevent users from hooking wired devices to a router?

Given that I do allow use of the Wifi, I can't turn off DHCP and go with static addresses, so that's out.

4
  • 1
    Do you have a domain? Mar 25, 2013 at 19:57
  • No, and if so I would of course utilize my options there. Each of our locations is on it's own LAN.
    – user201262
    Mar 25, 2013 at 19:58
  • I don't think this is possible. There's a thread on the Linksys forums about this as well, and the conclusion there is to physically secure the router/prevent access.
    – ernie
    Mar 25, 2013 at 19:59
  • 2
    Good man :) I think your best bet is either an active domain of sorts, or else you will manually need to whitelist/blacklist MAC addresses (not all routers support this, so you may need custom firmware as Kruug mentions below). Even that has easy ways around it though, so running custom lines is an option @techie007 mentions; however, all the empl.. I mean visitors would need are passive splitters. There's no silver bullet, but any or all those measures would do the majority of the work for the "average user" type of guest.
    – nerdwaller
    Mar 25, 2013 at 20:17

4 Answers 4

7

Couple/few ideas to consider:

  • Separate your Wifi network from your wired network, with separate IP and DHCP scopes.
  • Get routers that support black/whitelisting.
  • Unplug any jacks that are not in use at the switch/router, and lock the switch/router in a closet. If someone needs one they can buzz you to arrange to get it activated.
1
  • This is probably my best option. I'll get a better router, separate subnets for Wifi and wired, and deactivate unused ports. Thanks
    – user201262
    Mar 25, 2013 at 20:24
6

RJLOCKDOWN sells jack locks for RJ-45 ports that physically prevent plugging an Ethernet cable into the router.

jack lock

RJ 45 Jack Locks can give you the extra physical security that you need. Our customers use our jack locks in a variety of locations.
For example blocking unused ports on a switch to prvent [sic] unauthorized access.

1
  • 4
    seriously ? an allen key ?
    – Sirex
    Mar 26, 2013 at 0:49
1

MAC Address filtering comes to mind, as does turning off the ports not in use. Not sure if the E2500's can do this stock, maybe check out DD-WRT or Tomato?

1

Keep anything that exposes ports in a locked closet or room. This is pretty much how, say, Starbucks Coffee prevents you from using their ports while allowing Wi-Fi.

If you have sufficiently configurable switch, you can selectively power down ports. So even if you provide ports to junction boxes in rooms, those can be disabled.

You must log in to answer this question.