Business Community > WiFi > How to have only intranet access, NO WWW
< WiFi

How to have only intranet access, NO WWW

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

How to have only intranet access, NO WWW

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
How to have only intranet access, NO WWW
How to have only intranet access, NO WWW
2019-10-23 08:42:54 - last edited 2019-10-23 19:49:53
Model: EAP245  
Hardware Version: V3
Firmware Version:

Hello everyone,

 I am new here, just bought an ac1750/eap245v3,

there is any ways to block internet access to guests, by let them only browse whatever i put on a site hosted locally and NOT on the web?

Right now the (captive) portal display the splash page and redirect on this local site (192.168.....) correctly, all the users, so the problem is that from this point, onwards, they can go everywhere they want on the web and i simply would like to remove that option complitely for this particular setup, thanks for any help, i struggled for hours and hours but just i can't manage to find a way to do it....

  0      
 
  0      
 
#1
Options
1 Accepted Solution
Re:How to have only intranet access, NO WWW-Solution
2019-10-23 15:21:00 - last edited 2019-10-23 19:49:53

 

EAP245v3 wrote

There is a way to do this on the EAP-245???

 

No, you need to do this on the router (or switch in case of VLANs). If it is not possible with your router, consider to use a cheap spare router and install OpenWRT on it to physically separate the isolated network from your LAN. In OpenWRT it's easy to deny forwarding to the WAN.

༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
Recommended Solution
  0  
  0  
#4
Options
5 Reply
Re:How to have only intranet access, NO WWW
2019-10-23 11:59:14 - last edited 2019-10-23 12:02:41

Two possible solutions:

 

  • Create an own subnet for wireless users and deny forwarding in the router's firewall or
  • create a VLAN, set up a separate DHCP server and exclude the router from this VLAN.
༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  0  
  0  
#2
Options
Re:How to have only intranet access, NO WWW
2019-10-23 14:31:21

@R1D2 

 

There is a way to do this on the EAP-245???
I looked at the setting of my (cheap and unbranded) main router, it's very restrictive and there is no option to create another LAN, so, i was wondering if there is any possible workaround with the TP-link....

Thanks

  0  
  0  
#3
Options
Re:How to have only intranet access, NO WWW-Solution
2019-10-23 15:21:00 - last edited 2019-10-23 19:49:53

 

EAP245v3 wrote

There is a way to do this on the EAP-245???

 

No, you need to do this on the router (or switch in case of VLANs). If it is not possible with your router, consider to use a cheap spare router and install OpenWRT on it to physically separate the isolated network from your LAN. In OpenWRT it's easy to deny forwarding to the WAN.

༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
Recommended Solution
  0  
  0  
#4
Options
Re:How to have only intranet access, NO WWW
2019-10-23 19:55:29

@R1D2 

 

 

Yes that's what i was thinking too, any suggestion for the currently best and easy to configure router?
Money are not much of an issue, as long as it reasonable, but not being able to configure properly many settings surely is, thanks.

  0  
  0  
#5
Options
Re:How to have only intranet access, NO WWW
2019-10-23 22:58:14 - last edited 2019-10-23 23:01:58

EAP245v3 wrote

Yes that's what i was thinking too, any suggestion for the currently best and easy to configure router?

 

There are 1,379 platforms supported by OpenWRT and more then 500 modern platforms running latest OpenWRT versions. Do you want a single board computer? A WiFi router? A router with good NAT throughput? A fast CPU? One CPU core or more? Plenty of RAM? Or a big Flash ROM? Web UI or cmdline? Any vendor/chip preferences? Etc.

 

If you want to buy a router rather than using an old one, see the list here and use the filter to find the router which is best for your demands.

 

It's difficult for me to recommend an easy to configure router since all of them are easy to configure if one knows the Linux universe, but I don't know whether you know (and like) the Linux cmdline. Almost all OpenWRT routers can be configured via a nice web UI, too, but to be honest if you have a good Linux knowledge, cmdline might be even easier than the web UI with its mouse click orgies. 

 

My personal preference is the EdgeRouter-X, it costs ~ $50 and targets pro users. But its web UI is very limited and it runs Debian Linux by default with a not-so-easy config file syntax underneath. Albeit OpenWRT could be installed, too, it's somewhat harder to get it working on the ER-X compared to a SOHO router. But it uses a MIPS chip (a CPU from the field of supercomputers stripped down for embedded devices) and since I worked 25 years now with MIPS computers, my view of »ease of use« is definitely biased.

 

 

༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  0  
  0  
#6
Options

Information

Helpful: 0

Views: 1352

Replies: 5

About Us
Press
Copyright © TP-LINK CORPORATION PTE. LTD. All rights reserved.