Jump to content
  • 0

How to set up "No access to USB storage for unregistered devices"?


Dmitry Andrievsky
 Share

Question

I wanted to allow usage of local network and USB drives in particular only to devices I know, to registered ones.

So that guests can go to the internet through my WiFi, but not to USB drives.

Could you please advise how and what should I configure? 

 

Edited by Dmitry Andrievsky
Link to comment
Share on other sites

4 answers to this question

Recommended Posts

  • 1
14 минуты назад, Dmitry Andrievsky сказал:

I wanted to allow usage of local network and USB drives in particular only to devices I know, to registered ones.

So that guests can go to the internet through my WiFi, but not to USB drives.

Could you please advise how and what should I configure? 

 

https://help.keenetic.com/hc/en-us/articles/360000490820-Guest-network-

Link to comment
Share on other sites

  • 0
4 hours ago, werldmgn said:

Thanks, guest network is great solution for, well, guests, but sometimes (at least once for me in one month) there are guys who bruteforce wifi key. 

While I received the notification for that one and banned the guy from the internet, it would be beneficial if I was sure that the guy would not use LAN resources (even if used internet), so I am a bit more relaxed about such bruteforce guys.

Link to comment
Share on other sites

  • 0
19 минут назад, Dmitry Andrievsky сказал:

Thanks, guest network is great solution for, well, guests, but sometimes (at least once for me in one month) there are guys who bruteforce wifi key. 

While I received the notification for that one and banned the guy from the internet, it would be beneficial if I was sure that the guy would not use LAN resources (even if used internet), so I am a bit more relaxed about such bruteforce guys.

You can use Wireless Access Lists. By creating a whitelist of your devices, you block access for all clients that are not in the list.

Link to comment
Share on other sites

  • 0

Используйте wpa-eap, тогда не подберут. Или на основном выключайте wifi.

Если серьезно, то защиты после того как злоумышленник прошел аутентификацию по wifi внутри одного сегмента сделать невозможно. Он всегда сможет сменить мак, заспуфить arp и вообще сделать кучу всего. Потому нужна физическая изоляция в таком случае: отдельный сегмент.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Answer this question...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...