1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Can I Isolate a single device from certain parts of the network?

Discussion in 'Tomato Firmware' started by zapoqx, Jun 3, 2012.

  1. zapoqx

    zapoqx Networkin' Nut Member

    Recently, someone in the house was given the lovely gift of an ipad. While I have no quarrals with it, the issue is they recently got some app that can basically change channels on all DirecTV devices on the network. Initiatilly, I was thinking of not allowing the device on the network until its fixed. Since I don't know how to use an ipad, I figured that that would have been a downward spiral of a battle. So, what I want to do is isolate that device so it can only use the internet and 1 DirecTV device. I know the IPs of everything as well as MAC addresses if its needed. So is there any way to do this and could detailed steps be provided?
    I am currently using Victek 9011 on Linksys E3000.
     
  2. rs232

    rs232 Network Guru Member

    It sound like you need a tomato built with VLAN support. Have a look for example at VLAN version of toastman or shibby.
    With VLAN you can isolate devices but also enable communication between VLANs from and to specific addresses you decide.

    HTH
    rs232
     
  3. zapoqx

    zapoqx Networkin' Nut Member

    Correct me, but doesn't Victek's 9011 version use VLAN? I am pretty sure made a guest SSID with that version.
     
  4. rs232

    rs232 Network Guru Member

    To be fair I don't know... I used Victek's last time over a year ago and it didn't have VLAN at that point of time.
    If you have VLAN in your build you're good to go.
    The only think I would suggest is to get a recent built (whatever stream you're on) as lot of work has been done on VLAN recently (lot of bug fixing).
     
  5. zapoqx

    zapoqx Networkin' Nut Member

    Well it is the latest until Victek puts a new version out. Ok, so how would I go about it then? If I put them on the Guest SSID, would I have to provide that specific IP access to the IPs needed or could I do the same thing without switching the device over to the Guest SSID?
     
  6. rs232

    rs232 Network Guru Member

  7. zapoqx

    zapoqx Networkin' Nut Member

    So basically I'd have to make a 2nd Guest SSID then is what you're saying?
     
  8. rs232

    rs232 Network Guru Member

    Yes, that is one solution. Then manually allow the communication (using LAN access) from/to ipad/directTV
     
  9. zapoqx

    zapoqx Networkin' Nut Member

    well, its alot of work I guess, But I shall do it then. Thanks.
     

Share This Page