Exclude a host from local network

Hi All

i would like exclude certain hosts from accessing LAN resources. I would like those host to have only Internet access. Hosts are connected via cable to the switch and switch is connected to the router but occasionally those host will be working on Wi-Fi. What would be the possible approaches here?

Thanks for any replies.

Generally, the way to do this is by using a different network/vlan.

Look at the guest wifi guide - this can be extended to wired networks, too.

2 Likes

Is there any way that i could block access to local resources based on MAC address?

Local (LAN) traffic would never traverse the router (except for Input to the device itself) - and hence what you desire isn't possible.

1 Like

Will the client you want to block always be on the same network port? You could put that network port on a guest vlan? Have a separate SSID for the blocked clients too which is on the same vlan.

1 Like