stopping unwanted connections to router

Ish · 8 Jul 2008 at 00:09

Hi

An adsl router is set to give an i.p range of 192.168.1.200 to 192.168.1.209 and all these ip's a reserved by mac address in the router for certain pc's.

If someone comes along and plugs in their own pc/laptop and it's set to DHCP the router doesn't allocate them an i.p so this is fine.

How do we stop people who manually enter i.p details into their machine connecting to the router eg if someone manually sets the IP on their machine to 192.168.1.220 then they can connect to the router and surf the internet.

TIA

brendy · 8 Jul 2008 at 00:10

Can you not use access control and lock access down to mac address also?

Ish said:
Hi

An adsl router is set to give an i.p range of 192.168.1.200 to 192.168.1.209 and all these ip's a reserved by mac address in the router for certain pc's.

If someone comes along and plugs in their own pc/laptop and it's set to DHCP the router doesn't allocate them an i.p so this is fine.

How do we stop people who manually enter i.p details into their machine connecting to the router eg if someone manually sets the IP on their machine to 192.168.1.220 then they can connect to the router and surf the internet.

TIA

Ish · 8 Jul 2008 at 00:25

If you mean in the router settings then I have used the only available setting is where you assign each IP to a specific PC by it's max address.

This doesn't stop people who manually set their IP though

brendy · 8 Jul 2008 at 00:43

Can you lock the router away in a safe location? the mac filter only works on wireless anyway iirc.

Ish · 8 Jul 2008 at 07:18

Hi

The mac filter works on wired connections.

The router is actually connected to a 24 port switch from which there are about 20 network points spread out all over the building .

Duke · 8 Jul 2008 at 08:21

Use an usual IP range or set MAC filtering.

TaLLyJ · 8 Jul 2008 at 08:47

MAC-based filtering will be a good idea

Ish · 8 Jul 2008 at 10:39

The only option the netgear router has is reserve an IP for a pc by it's max address. I have this set but it doesn't stop anyone who manually sets an IP address on their machine.

Duke's idea of using an unsual IP range looks like it could be worth a try.

tolien · 8 Jul 2008 at 12:59

You're mixing up MAC address filtering for the wireless interface with reserved DHCP leases (which use the network card's MAC address to give it the same IP each time).

There should be some option to set a firewall rule blocking everything but the IPs you allowe.

Ish · 9 Jul 2008 at 14:53

Thanks Tolien. I understand now.