Whitelist LAN access

[kaczor47]

Hello,

Is there a way to prevent LAN access for all devices except for a few whitelisted ones? Note that I don't want to prevent WAN access at all.

The reason for this is are tenants/visitors for a brief period of time and I am leaving my network setup in tact. This includes a server and a NAS which I will access remotely. I plan on only giving away the Guest SSID details (with no local access), however I would like to secure the wired ports.

Is there an easy way to do this?

Thanks in advance!

 

[RMerlin]

Can't be done on wired devices because their traffic is switched, not routed - the firmware doesn't get any access to that traffic.

 

[kaczor47]

Can't be done on wired devices because their traffic is switched, not routed - the firmware doesn't get any access to that traffic.

Thanks for the clarification.