Limit wired LAN port to WAN access only?

[keitheva]

Primary router: RT-AC68U

I have a Netgear router which I use as a second WAP/Switch - it has DHCP disabled and is connected to the ASUS via a wired LAN connection. It all works fine, but ideally I only want devices connected to the Netgear WAP to be able to access the WAN, not my LAN. I can't disable LAN access on the Netgear because that prevents it from being able to access the ASUS (and hence get WAN access). Is there a way to set a LAN wired port on the ASUS (the one the Netgear is connected to) to only be permitted WAN access, but not the rest of the LAN?

 

[pete y testing]

Is there a way to set a LAN wired port on the ASUS (the one the Netgear is connected to) to only be permitted WAN access, but not the rest of the LAN?

no but if you switch the way you have the netgear connected you can isolate it on a different subnet and thus afford you a level of separation

eg connect the netgear via its wan port and not lan port and set the netgears lan ip address and dhcp server to a different subnet

eg asus running 192.168.1.1

netgear running 192.168.2.1

the devices connected to the netgear will be behind dual nat and you may need to also put the netgear ip address in the dmz of the asus

but you will get some level of separation

 

[keitheva]

no but if you switch the way you have the netgear connected you can isolate it on a different subnet and thus afford you a level of separation

eg connect the netgear via its wan port and not lan port and set the netgears lan ip address and dhcp server to a different subnet

eg asus running 192.168.1.1

netgear running 192.168.2.1

the devices connected to the netgear will be behind dual nat and you may need to also put the netgear ip address in the dmz of the asus

but you will get some level of separation

Thanks.