RBR850 - Disable Internet Access but enable local intranet access

Question

I just bought the RBR850 and am struggling to find in the user manual the instructions on how to disable Internet access for a device on my network but allow local network devices to connect to it.

Additionally, I'm trying to figure out where to enable "parental controls" on the Orbi - I thought these features were standard especially on such a high end model.

FURRYe38 · Answer

Netgear has set up a community forum specifically for the Orbi AX (WiFi 6) products. Most of the people who watch that forum are more likely to have experience with Orbi AX and know how to work it better than those of us who follow this "general Orbi" forum. Might be more likely to find someone who has a solution if the question is posted there:https://community.netgear.com/t5/Orbi-AX/bd-p/en-home-orbi-ax
&nbsp;
For Smart Parental controls, Please visit the following Forum:
https://www.netgear.com/home/services/smart-parental-controls/https://community.netgear.com/t5/NETGEAR-Smart-Home-Parental/bd-p/en-home-smart-parental-controls
Please use this link to the main forum product list to review and choose where to make your posts.&nbsp;https://community.netgear.com/t5/NETGEAR-Forum/ct-p/en-netgear
Thank you

CrimpOn · Answer

iqi&nbsp;wrote:
I just bought the RBR850 and am struggling to find in the user manual the instructions on how to disable Internet access for a device on my network but allow local network devices to connect to it.&nbsp;

On the Original Orbi models, the web interface (http://orbilogin.net), on the Advanced Tab, Security Menu has an option called Block Services.&nbsp; The attached screen shot shows how I have blocked the device at 192.168.1.102 from opening Any TCP or UDP connection to any possible port (1-65535) on the internet.&nbsp; Local access is not affected.
&nbsp;
There is always a chance that the Orbi 850 has different options than my (old) Orbi.
&nbsp;

iqi · Answer

Thank you. I did precisely that but I find that the device was still able to access the internet. Traffic from the device was not restricted to the local network. I have to figure out a way to test traffic to the device from outside the network.

For example, I have the following setting but this laptop can still access the internet. I also tried Service type = All but the setting didn't prevent internet access from the device.

Service Type	Restrict 18
Protocol	TCP/UDP
Starting Port	1
Ending Port	65535
Service Type/User Defined	Restrict18

Filter Services For :

Only This IP Address :

192.168.5.18

iqi · Answer

Aditionally, I don't see the ability to restrict services for the guest wireless network. Any insights on how to do that is appreciated too.

CrimpOn · Answer

iqi&nbsp;wrote:
Thank you. I did precisely that but I find that the device was still able to access the internet. Traffic from the device was not restricted to the local network. I have to figure out a way to test traffic to the device from outside the network.

&nbsp;

Well, fudge.&nbsp; I will perform another test.&nbsp; I usually get tripped up by forgetting to set the Schedule to Always and click on Apply.&nbsp; (I get in a hurry and go on to other things.)
&nbsp;
OK. Test performed with a Linux laptop, IP 192.168.1.18.&nbsp; Set up to block Any, from port 1 through port 65535. Schedule Always. "Apply".
The laptop cannot load web pages. The software update checker cannot load software repositories.&nbsp; I think the internet is "dead" to this laptop. Can you try your experiment again?
&nbsp;
My understanding is that there can be no way to test traffic to the device from the internet

The Orbi does&nbsp; not allow connections from the internet to any device on the LAN unless a port is opened specifically to allow that.
When devices open port "out", then resources on the internet use those connections to send traffic to the device.That's how most Internet of Things (IoT) devices work.&nbsp; When they power up, they open a connection to their "cloud".&nbsp; The cloud can never connect to them because the Orbi will reject any inward connections.

Forum Discussion

RBR850 - Disable Internet Access but enable local intranet access

6 Replies