Thread: IP Filtering Issue

BSNL recently supplied us a "Teracom Type-II" (Model : T2-B-Gawv1.4U10Y-BI; Firmware : 10.4.3.12.12) Router for our Broadband Connectivity. We've 8 Computers connected through LAN. We, according to our need, changed the Router from "Bridge" to "PPPoE" Mode. Now I need to isolate 6 Computers from accessing Internet (TCP/UDP/FTP) keeping only 2 Computers to access while all activities on LAN (i.e. File Sharing, Printer Sharing etc.) will be active. It is known to me that such type of isolation can be done using "IP Filtering" but I've been unable to deal with that "Teracom Type-II" Router in respect of IP Filtering.
Can anyone help me how to configure "IP Filtering" with that specific Router?

Presume you are using wifi to connect other systems.

Go to 192.168.1.1, enter the ID and password as admin,

LHS panel > Configuration > Wireless network > MAC Address Filter > Select MAC Auth > Black list > Add the IPs you want to restrict.

As I stated, I use only LAN (10/100) through CAT5e Cable and via Switch. Everything is going well except all the 6-Computers are using Internet since my Router is configured in PPPoE Mode. I previously used D-Link Router which I easily configured to use Internet through 2-Computers isolating them to use TCP/UDP/FTP.
But this time, as I did not see Teracom Router at all, I'm little sticky to use IP Filtering provided someone helped me.

If you want to restrict your users from acessing the internet by IP address, you have to ask yourself how long it will take them to find out how to change the IP address on their machines. If they are not savy enough to do this, you might just as well restrict them by leaving "default gateway" blank on their PCs... voila: no internet. Easy to do.

If, on the other hand, they have a shred of Windows knowledge, and the inclination to rebel, then filter by MAC address, not by IP address. Of course, this is spoofable too, but it is unlikley that someone who has only set up a couple of PCs on a network at home would be able to work with that.

...I previously used D-Link Router....

.
(A)
Please mention model/number.
Any adsl modem (Dlink ?) +wifi router ( Dlink ?)
or 3 -in one adslmodem+4lanport + wifi router.
(B)
Confirm the assumption here, that in your LAN all users have wifi access .

I've configured my Router to assign each Computer (Total 8 PCs) a "Fixed IP" (Range 192.168.1.2 to 192.168.1.9) every time each powers up by "MAC ID Binding". I've also barred each user to change LAN Adapter's IP, System Time etc. by tuning Windows Registry as well as Group Policy Editing. Naturally they cannot even touch their System's LAN Adapter. I also tried to leave "default gateway" blank but that mechanism failed.
One thing more, I applied "IP Filtering" when there was my "D-Link" Router. But this time, as the interface differs, I've been unable to configure it properly.

Teracom Type-II
Model : T2-B-Gawv1.4U10Y-BI
Firmware : 10.4.3.12.12)

Despite there is provision in my Router to use WiFi, I do/will not use WiFi. Instead, I use 10/100 LAN.

One thing more, I configured the "IP Filtering" in my earlier Router (D-Link) but this time as Teracom's interface is different, I've been unable to configure it properly. Except "IP Filtering", everything is going well.

I've configured my Router to assign each Computer (Total 8 PCs) a "Fixed IP" (Range 192.168.1.2 to 192.168.1.9) every time each powers up by "MAC ID Binding". I've also barred each user to change LAN Adapter's IP, System Time etc. by tuning Windows Registry as well as Group Policy Editing. Naturally they cannot even touch their System's LAN Adapter. I also tried to leave "default gateway" blank but that mechanism failed.

What I'd do...

Do not use DHCP. Configure each PC with a fixed IP address. Either leave default gateway blank, put 127.0.0.1 or (if Windows won't have that) some IP address on your net that does not exist like 192.168.1.200. Given that you are happy with the security that you have applied to Windows with regards to people changing those settings, that should be your problem solved.

DHCP is very useful if you have devices that cannot be alloted a fixed IP, or you are coming and going with a laptop between, say, home and office networks. Otherwise, the benefit of it is that it saves one tiny step during configuring a machine --- so why bother? I use it in my house for a Logitech Squeezebox. When I worked, I used it for ...nothing. Everything had fixed IPs. around 100 devices. I'm sure others might have exactly the opposite opinion! That's fine, because either way will work.

Best say what version of Windows you are using. My experience stops with XPsp3.