id="info"

Question

Locked

How can I block LAN IP?

By silvacala ·
I have a computer in my LAN (unfortunately I cannot find it) which generates extremely high internet traffic. How can I block this specific IP from using internet?
Please answer. Thanks in advance

This conversation is currently closed to new comments.

11 total posts (Page 1 of 2)   01 | 02   Next
| Thread display: Collapse - | Expand +

Clarifications

Collapse -
by robo_dev

What type of LAN?

Is this your home wireless lan or a company wired network?

All Answers

Collapse -

Do you have admin access to router?

by jemorris In reply to How can I block LAN IP?

Also do you have administrator access to your router/switch?

Collapse -

Identify the "extra" connection in your router.

by plevin In reply to How can I block LAN IP?

Go into your router's connection list and associate each connection with its respective device. You'll probably be able to identify most of the connections. Turn off at the connection list any wireless connections you can't identify, or unplug any wired ones. You'll find out very quickly who the mystery guest is!

Collapse -

Deny it from DHCP

by robert_j_dixon In reply to How can I block LAN IP?

If you are using DHCP, use arp, find the offending machines MAC address, then configure the DHCP server not to give that MAC address an IP address, or one that won't route or similar.

Then wait for the scream :-)

You might also look-up the MAC to see who made the NIC, to help identify which machine it is.

Collapse -

thanks

by silvacala In reply to How can I block LAN IP?

I have administrative privileges to the router, and we dont use dhcp, it's not wireless network, it is a wired network.

Collapse -

thanks

by silvacala In reply to How can I block LAN IP?

I have administrative privileges to the router, and we dont use dhcp, it's not wireless network, it is a wired network.

Collapse -

Firewall?

by tmcclure In reply to How can I block LAN IP?

If you have a central firewall, you may be able to block internet traffic to and from the offending host.

Collapse -

Block it at the firewall

by VBJackson In reply to How can I block LAN IP?

If you know the specific IP address, and can add rules to your firewall, then the best option is to add a rule "Deny [IP Address] Outbound ANY" as the first rule ( or however you firewall displays the rules).
This will block the user from all internet access.
I would also recommend that you log back in to the firewall after a couple of days and make sure the rule is still there, just in case the problem user turns out to be someone that ALSO has access to the firewall.

Collapse -

Look for the mac address in the switch

by Martin Thor-Kristiansen In reply to How can I block LAN IP?

If the pc i sconnected to a switch you can look for the mac address at the switch to see witch port the mac address is connected to.
This way you can find the pc or shutdown the switchport the pc is connected to.

Collapse -

Use an ACL to deny the traffic

by jwaustin In reply to How can I block LAN IP?

Create an ACL like 'access-list 43 deny 10.122.12.13' then apply it on the interface that leads to the Internet. Be sure to extend the ACL so it only drops protocols or ports that violate your AUP. Make sure the change is within your authority.

Back to Networks Forum
11 total posts (Page 1 of 2)   01 | 02   Next

Hardware Forums