How to prevent an IP range having access outside the local network (i.e. block internet access) on TP-Link...

Does adding complexity mean a more secure cipher?

What to do when moving next to a bird sanctuary with a loosely-domesticated cat?

Is bread bad for ducks?

Is Cinnamon a desktop environment or a window manager? (Or both?)

Correct punctuation for showing a character's confusion

How to translate "being like"?

Why doesn't UInt have a toDouble()?

How come people say “Would of”?

Kerning for subscripts of sigma?

Is it okay to consider publishing in my first year of PhD?

How much of the clove should I use when using big garlic heads?

How did passengers keep warm on sail ships?

A female thief is not sold to make restitution -- so what happens instead?

Cooking pasta in a water boiler

How to type this arrow in math mode?

What is the motivation for a law requiring 2 parties to consent for recording a conversation

What is this business jet?

The phrase "to the numbers born"?

Why couldn't they take pictures of a closer black hole?

How do I free up internal storage if I don't have any apps downloaded?

What is the meaning of Triage in Cybersec world?

Can an undergraduate be advised by a professor who is very far away?

Button changing its text & action. Good or terrible?

Why are there uneven bright areas in this photo of black hole?



How to prevent an IP range having access outside the local network (i.e. block internet access) on TP-Link Archer



The 2019 Stack Overflow Developer Survey Results Are Inhow to share my wireless internet access but not my files without using ANY security measure just WAP. network splitter?Home Network with Powerline adapters, wireless router and Wireless Access pointBlock network access to local development serverOpenWRT NAT only for clients on certain WLAN networkPort blocking on client machinesSubnets or VLANs?How to block everything (all incoming and outgoing internet access) except those applications are in firewall white-list?Local network - multiple internet accessTP-Link Access Control targetsNetworking: Reject forwarding to specific network in OpenWrt





.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}







1















I have the TP-Link Archer VR900. I have set up interface groups so my wired network has a separate IP range to everything else.



I want to be able to block internet access from clients in this group so I can put a very old PC on my intranet without it getting internet access, so no auto-updates get triggered until I can finish transferring files.
I don't want to plug it in then block it once I know the IP address, I want to block an entire IP range like 192.168.2.xxx from having external access.



It seems like it should be an obvious feature but I cannot find how.










share|improve this question























  • If the router doesn't support this feature in the firmware, statically set the "old PC" nic outside the DHCP pool. When you get to the default gateway section leave it blank. The PC will not know where to send packets to reach the internet.

    – Tim_Stewart
    yesterday


















1















I have the TP-Link Archer VR900. I have set up interface groups so my wired network has a separate IP range to everything else.



I want to be able to block internet access from clients in this group so I can put a very old PC on my intranet without it getting internet access, so no auto-updates get triggered until I can finish transferring files.
I don't want to plug it in then block it once I know the IP address, I want to block an entire IP range like 192.168.2.xxx from having external access.



It seems like it should be an obvious feature but I cannot find how.










share|improve this question























  • If the router doesn't support this feature in the firmware, statically set the "old PC" nic outside the DHCP pool. When you get to the default gateway section leave it blank. The PC will not know where to send packets to reach the internet.

    – Tim_Stewart
    yesterday














1












1








1








I have the TP-Link Archer VR900. I have set up interface groups so my wired network has a separate IP range to everything else.



I want to be able to block internet access from clients in this group so I can put a very old PC on my intranet without it getting internet access, so no auto-updates get triggered until I can finish transferring files.
I don't want to plug it in then block it once I know the IP address, I want to block an entire IP range like 192.168.2.xxx from having external access.



It seems like it should be an obvious feature but I cannot find how.










share|improve this question














I have the TP-Link Archer VR900. I have set up interface groups so my wired network has a separate IP range to everything else.



I want to be able to block internet access from clients in this group so I can put a very old PC on my intranet without it getting internet access, so no auto-updates get triggered until I can finish transferring files.
I don't want to plug it in then block it once I know the IP address, I want to block an entire IP range like 192.168.2.xxx from having external access.



It seems like it should be an obvious feature but I cannot find how.







networking router security home-networking






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked yesterday









Mr. BoyMr. Boy

1,792164667




1,792164667













  • If the router doesn't support this feature in the firmware, statically set the "old PC" nic outside the DHCP pool. When you get to the default gateway section leave it blank. The PC will not know where to send packets to reach the internet.

    – Tim_Stewart
    yesterday



















  • If the router doesn't support this feature in the firmware, statically set the "old PC" nic outside the DHCP pool. When you get to the default gateway section leave it blank. The PC will not know where to send packets to reach the internet.

    – Tim_Stewart
    yesterday

















If the router doesn't support this feature in the firmware, statically set the "old PC" nic outside the DHCP pool. When you get to the default gateway section leave it blank. The PC will not know where to send packets to reach the internet.

– Tim_Stewart
yesterday





If the router doesn't support this feature in the firmware, statically set the "old PC" nic outside the DHCP pool. When you get to the default gateway section leave it blank. The PC will not know where to send packets to reach the internet.

– Tim_Stewart
yesterday










0






active

oldest

votes












Your Answer








StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1423817%2fhow-to-prevent-an-ip-range-having-access-outside-the-local-network-i-e-block-i%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























0






active

oldest

votes








0






active

oldest

votes









active

oldest

votes






active

oldest

votes
















draft saved

draft discarded




















































Thanks for contributing an answer to Super User!


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1423817%2fhow-to-prevent-an-ip-range-having-access-outside-the-local-network-i-e-block-i%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

Why not use the yoke to control yaw, as well as pitch and roll? Announcing the arrival of...

Couldn't open a raw socket. Error: Permission denied (13) (nmap)Is it possible to run networking commands...

VNC viewer RFB protocol error: bad desktop size 0x0I Cannot Type the Key 'd' (lowercase) in VNC Viewer...