[Feature Request] Disable Wireless Access To WebUI

[Hardenizer]

Its good defend mechanism to have things managed locally through wire only (specially when you have many wireless users in public place), wonder if it can be supported by asus firmware since it exist in dd-wrt.

 

[AndreiV]

1) Your request should be directed to ASUS , not Merlin .

2) What you require is already available :

GUI > Administration > System > ENABLE ACCESS RESTRICTIONS

 

[DJones]

Just want to note if you use this you must make those devices static ip’s otherwise you’ll lock yourself out if the ip address changes. It’s not MAC address based.

If one of your 4 devices are not online then even if you have a static ip someone if they know which ip address has access to the gui can manually set their devices ip address to that offline device to gain access to the login page.

 

[Hardenizer]

1) Your request should be directed to ASUS , not Merlin .

Ah sorry thought can be done by merlin.

2) What you require is already available :

GUI > Administration > System > ENABLE ACCESS RESTRICTIONS

Locking all wireless devices access to webui by one check mark and allowing only direct wire connection is way much easier and convenient compared to lock access except to specific static IP as mentioned by @djones.75829

But since it is only can be implemented by main ASUS then yeah sadly most likely this feature will never see the light anytime soon if ever..

 

[drinkingbird]

Ah sorry thought can be done by merlin.

Locking all wireless devices access to webui by one check mark and allowing only direct wire connection is way much easier and convenient compared to lock access except to specific static IP as mentioned by @djones.75829

But since it is only can be implemented by main ASUS then yeah sadly most likely this feature will never see the light anytime soon if ever..

What you're asking for already exists - guest networks for untrusted/semi-trusted devices with "access LAN" disabled.

If you don't want to do that you can use ebtables/iptables to block it via script.

 

[JTnola]

What you're asking for already exists - guest networks for untrusted/semi-trusted devices with "access LAN" disabled.

If you don't want to do that you can use ebtables/iptables to block it via script.

(That only impacts guest networks.)

 

[drinkingbird]

(That only impacts guest networks.)

Um, yeah, that's the point. Anything you're concerned with attempting to hack into your router shouldn't be on your trusted LAN.