Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[astaldo]

I'm searching for an access point that can block hosts for WLAN devices.
(In detail: I want to block all internet access excluding two different https hosts)

I have an DIR-655 Hradware Version B1 Firmware 2.05 in my network.
So I give it a try and activated access control, added a policy with the mac address  of my mobile device and decided to block all internet access.
After aplying the policy I could still browse the internet
When I read the description of Access Control, it reads I can enforce rules for specific LAN computers.
Are those policies only applied to wired computers?
If not what did I wrong?

Regards,
Astaldo

[FurryNutz]

ink>Welcome!

• What region are you located?

Is the 655 being used as the main host router or as a 2ndary wired AP only?

[astaldo]

Hi FurryNutz, I'm from germany.
the 655 is just a secondary wired AP

[FurryNutz]

Well unfortunately you can do any filtering or blocking on the 655 when running in this mode. Since filtering and blocking depends on use of the WAN port, and I presume you are using the 655s LAN port to connect to the main host router, doing any filtering or blocking is not supported in this mode. To do that  you'll need to run the 655 in router mode. If you have a main host router, use the main host routers filtering and blocking features at that point to block connections make to the 655. The 655 when in AP mode is just a pass thru for connections and traffic, use the main host router do do all the blocking and filtering there.

[astaldo]

ah ok that's a pity.
Is there any other D-Link access point, that I could use in this way?
My main host router can't do such a filtering (I have a fritz.box and this stupid thing can only allow all HTTPS connections or none and I dont want to change the firmware)

Thanks in advance,
Astaldo

[FurryNutz]

Does your main host router have a feature called DMZ?

[astaldo]

No the fritzbox doesnt support DMZ.
Before checking my DIR-655 I tried an old router with dd-wrt firmware. I can do what I want with a virtual Access point a bridge and iptables but the router is too old to support some needed dd-wrt functions.

[FurryNutz]

Darn.

You might check out D-Link DAP series APs. I believe they do have some filtering and blocking abilities. I'd contact your regional D-Link support office to see which model does have these features and is best suited for you.

[astaldo]

Thanks a lot for your very fast and nice response.

Regards,
Astaldo

[FurryNutz]

Its too bad the fritz box doesn't have DMZ, you could use that then switch the 655 to router mode then you could configure filters and blocking.

Good Luck.