[Feature Request] Disable Wireless Access To WebUI

Hardenizer

New Around Here
Its good defend mechanism to have things managed locally through wire only (specially when you have many wireless users in public place), wonder if it can be supported by asus firmware since it exist in dd-wrt.
 

AndreiV

Very Senior Member
1) Your request should be directed to ASUS , not Merlin .

2) What you require is already available :

GUI > Administration > System > ENABLE ACCESS RESTRICTIONS
 

DJones

Senior Member
Just want to note if you use this you must make those devices static ip’s otherwise you’ll lock yourself out if the ip address changes. It’s not MAC address based.

If one of your 4 devices are not online then even if you have a static ip someone if they know which ip address has access to the gui can manually set their devices ip address to that offline device to gain access to the login page.
 

Hardenizer

New Around Here
1) Your request should be directed to ASUS , not Merlin .
Ah sorry thought can be done by merlin.
2) What you require is already available :

GUI > Administration > System > ENABLE ACCESS RESTRICTIONS
Locking all wireless devices access to webui by one check mark and allowing only direct wire connection is way much easier and convenient compared to lock access except to specific static IP as mentioned by @djones.75829

But since it is only can be implemented by main ASUS then yeah sadly most likely this feature will never see the light anytime soon if ever..
 

drinkingbird

Very Senior Member
Ah sorry thought can be done by merlin.

Locking all wireless devices access to webui by one check mark and allowing only direct wire connection is way much easier and convenient compared to lock access except to specific static IP as mentioned by @djones.75829

But since it is only can be implemented by main ASUS then yeah sadly most likely this feature will never see the light anytime soon if ever..

What you're asking for already exists - guest networks for untrusted/semi-trusted devices with "access LAN" disabled.

If you don't want to do that you can use ebtables/iptables to block it via script.
 

JTnola

Regular Contributor
What you're asking for already exists - guest networks for untrusted/semi-trusted devices with "access LAN" disabled.

If you don't want to do that you can use ebtables/iptables to block it via script.
(That only impacts guest networks.)
 

Similar threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top