• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 359
  • Last Modified:

how to limit one device for wifi network?

Dear Experts,

I have distributed internet via wifi access points and its limit to one user only. but those users are further distributing internet while making hotspot on mobile.
How I can stop this?
1 Solution
John HurstBusiness Consultant (Owner)Commented:
Who owns (1) the Wi-Fi and (2) the mobile devices. ?

If the users own the mobile devices, it will be very hard to stop them from becoming hotspots.

You probably need a policy that if a user does this, their mobile device will be disconnected.
nainasipraAuthor Commented:
me own WiFi router and user own mobile. which kind of policy and what kind of device i can use to block this ?
John HurstBusiness Consultant (Owner)Commented:
There is no way you can lock down a user owned device. So kick them off and lock them out of they cause issues.
Fred MarshallPrincipalCommented:
While a bit unusual, so I don't know all the implications, you might block any but the most usual ports.
(Whether you can do this with your router would be a question).
This should work, to a degree, because:

- In order for an added client to get an IP address, the "host" needs to be running DHCP on a separate subnet.  This means NAT in order to "expand" the IP address space to accommodate the added users.

- In NAT, computers and their individual applications are assigned ports on the next IP stage.  Something like this:
.. my computer is using Internet Explorer and sends a packet destined for the web.
.. the packet hits the NATting router and the apparent IP address and port appear to be coming from the router's WAN / Internet IP.  
.. when packets return in response, the IP address gets the packets back to the router.
.. when packets return in response, the port is information the router uses to address the packet onto the LAN back to your computer and back to your application.

So, if you block all the ports then it will shut down clients at the next level of NAT.

I leave the actual implementation and practical details as "an exercise for the student"..   :-)
Sounds good but may not work in practice.
It may be that you could experiment with blocked ports and actually reach an acceptable compromise.
It wouldn't surprise me if someone posts: "That won't work because........" and then we'd all learn something.
Craig BeckCommented:
The only way you'll really stop this is if you use an authenticated proxy which limits each user login to one, or if you use an MDM solution which temporarily restricts what users can do with their devices while connected to your network.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now