NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
Can I block anything on VLAN X from accessing the WAN/internet
I would like to set up my ORBI Pro 30 system so that any device connected with VLAN 99 can communicate with other devices on my network, but not have access to the internet. Ideally, I'd like to b...
The correct answer is....
1) set up the vlan with a unique range of addresses (eg: 192.168.30.2-254)
2) block all services for the range 192.168.30.2-254
3) in the VLAN section, uncheck network and device isolation for that VLAN
Devices on that VLAN can no longer get to the internet....however they can get to any other device on a vlan that doesn't isolate users or that network......eg. a device on VLAN 3 can now get to VLAN 1 but not to the internet
Just to confirm the exact model is.... https://www.downloads.netgear.com/files/GDC/SXK30/SXK30_DS.pdf , correct?
VLAN is described starting on page 230 of the User Manual:
https://www.downloads.netgear.com/files/GDC/SXK30/SXK30_UM_EN.pdf
VLAN is an internal concept. Nothing sent out the WAN port will be "tagged" with a VLAN number. There is no need to insert a managed switch to strip VLAN tags before they reach the router.
My sense is that the instructions on page 88 indicate that the procedure is to define the LAN port as a "Trunk" port and then specify what happens to each of the VLAN tags that arrive on that port.
There is a Community Forum specifically for the Pro product line. People who watch that forum are more likely to be familiar with how VLANs work: (although it is not clear to me that much is "happening" on that forum)
https://community.netgear.com/t5/Orbi-Pro-Mesh-WiFi-Systems/bd-p/insider-business-orbi-pro
one would hope that you could set up a specific VLAN that only allowed LAN access......nothing on that LAN can reach the WAN. That's what I'm trying to do. I want an in house only VLAN
The correct answer is....
1) set up the vlan with a unique range of addresses (eg: 192.168.30.2-254)
2) block all services for the range 192.168.30.2-254
3) in the VLAN section, uncheck network and device isolation for that VLAN
Devices on that VLAN can no longer get to the internet....however they can get to any other device on a vlan that doesn't isolate users or that network......eg. a device on VLAN 3 can now get to VLAN 1 but not to the internet
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
