Solved

how to limit one device for wifi network?

Posted on 2014-12-23
5
344 Views
Last Modified: 2014-12-26
Dear Experts,

I have distributed internet via wifi access points and its limit to one user only. but those users are further distributing internet while making hotspot on mobile.
How I can stop this?
0
Comment
Question by:nainasipra
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
5 Comments
 
LVL 95

Expert Comment

by:John Hurst
ID: 40514743
Who owns (1) the Wi-Fi and (2) the mobile devices. ?

If the users own the mobile devices, it will be very hard to stop them from becoming hotspots.

You probably need a policy that if a user does this, their mobile device will be disconnected.
0
 

Author Comment

by:nainasipra
ID: 40514970
me own WiFi router and user own mobile. which kind of policy and what kind of device i can use to block this ?
0
 
LVL 95

Expert Comment

by:John Hurst
ID: 40514996
There is no way you can lock down a user owned device. So kick them off and lock them out of they cause issues.
0
 
LVL 26

Expert Comment

by:Fred Marshall
ID: 40515108
While a bit unusual, so I don't know all the implications, you might block any but the most usual ports.
(Whether you can do this with your router would be a question).
This should work, to a degree, because:

- In order for an added client to get an IP address, the "host" needs to be running DHCP on a separate subnet.  This means NAT in order to "expand" the IP address space to accommodate the added users.

- In NAT, computers and their individual applications are assigned ports on the next IP stage.  Something like this:
.. my computer is using Internet Explorer and sends a packet destined for the web.
.. the packet hits the NATting router and the apparent IP address and port appear to be coming from the router's WAN / Internet IP.  
.. when packets return in response, the IP address gets the packets back to the router.
.. when packets return in response, the port is information the router uses to address the packet onto the LAN back to your computer and back to your application.

So, if you block all the ports then it will shut down clients at the next level of NAT.

I leave the actual implementation and practical details as "an exercise for the student"..   :-)
Sounds good but may not work in practice.
It may be that you could experiment with blocked ports and actually reach an acceptable compromise.
It wouldn't surprise me if someone posts: "That won't work because........" and then we'd all learn something.
0
 
LVL 46

Accepted Solution

by:
Craig Beck earned 500 total points
ID: 40515249
The only way you'll really stop this is if you use an authenticated proxy which limits each user login to one, or if you use an MDM solution which temporarily restricts what users can do with their devices while connected to your network.
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

For many of us, the  holiday season kindles the natural urge to give back to our friends, family members and communities. While it's easy for friends to notice the impact of such deeds, understanding the contributions of businesses and enterprises i…
This article is a collection of issues that people face from time to time and possible solutions to those issues. I hope you enjoy reading it.
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question