NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Allowing access to only one site with RBR50
is there a way to configure the router to allow internet access to only one ip address? It is important that the local network has full access internally between each devices. But every devices (wifi and wired) must be blocked to the internet except one or two sites.
if this rbr50 cannot do it, which one can?
ps: obviously online services are out of the question. This must be handle by the router (or a device between the router and the wan).
thanks
4 Replies
Guytas wrote:is there a way to configure the router to allow internet access to only one ip address? It is important that the local network has full access internally between each devices. But every devices (wifi and wired) must be blocked to the internet except one or two sites.
if this rbr50 cannot do it, which one can?
ps: obviously online services are out of the question. This must be handle by the router (or a device between the router and the wan).
Don't see a provision on an Orbi device.
You would have to set it up a proxy server, block all traffic, except the ip addresses you want to allow access to.
Guytas wrote:is there a way to configure the router to allow internet access to only one ip address? It is important that the local network has full access internally between each devices. But every devices (wifi and wired) must be blocked to the internet except one or two sites.
I agree with Mstrbig that there is no obvious Orbi setting for this. What comes to mind are:
- Disable RIP on the advanced LAN Setup page, so that the Orbi learns no routing information from the ISP.
(or maybe even unplug the Orbi from the ISP entirely)
Install another router on the LAN side, maybe an inexpensive EdgerouterX ($65 on Amazon) and give it a static IP address.
Connect the ISP to the EdgerouterX.
On the Orbi, create static routes (Advanced Tab, Advanced Setup) to the external IP addresses that you want to reach and have each point to the EdgerouterX as the gateway.
The cost to experiment with this solution looks to be about $65 plus tax.
The "downside" I see is that a bright enough person may discover the static IP of the EdgerouterX and reconfigure an individual computer to use the EdgerouterX as its gateway rather than the Orbi. - As you suggested, place a router that CAN do what you want between the Orbi and the ISP and put the Orbi into AP mode.
This entails finding a router that has this capability by studying user manuals or posting in various forums.
Thank you very much you two. This is a lot of information. It sounds a good solution.
the router you referred.. is this one ok?
thabks again and I'll get to it now....
Guytas wrote:thanks again and I'll get to it now....
All I know about the product is that there have been several posts mentioning using it for one purpose or another.
Some years ago, I needed to restrict a computer to access with only a certain IP addresss.
Since I alone had the administrative login to a Windows computer, I used the Windows Firewall to set up rules that controlled which IP addresses could access it (and it could access). People who had "regular user" account could not change the firewall settings.
Good Luck
- Disable RIP on the advanced LAN Setup page, so that the Orbi learns no routing information from the ISP.
