Block Intranet Communication

angela

Like many of you, I have a WiFi from the Internet company connected with a Smart TV and Google Home and Alexa smart speakers always listening. jk

But is there a way to block communication between Graphene and any local device? I like my devices meek and quiet, not chatty and sharing. I don't want like devices talking with ICMP or unusual protocols to bypass firewalls or learn about one another.

privy2naught

This is a networking concern, the solution is to use VLAN's, the how will depend on your firewall/router

angela

privy2naught I don't know what this means or even how to learn what you are saying.

I have an open source firmware for my router with standard router options. I do not have formal networking education.

DeletedUser87

angela you should start by researching. For a first understanding of VLANs, Wikipedia is good enough.

NetRunner88

angela
On some router (OpenWRT does this) you have AP isolation for guest WiFi.
Ap isolation mean that devices can not see each others.
I use that for my wireless devices.

namecheckobnoxiously

I'd love to know a simple solution to block communication between devices as well. I know most VPN's have a "block local network" option, but I don't use a VPN currently.

Onlyfun

NetRunner88 exact solution for OPs issue.

though i hope their statement about many of us using their described setup with smart google home is far from reality.

angela

NetRunner88 So the guest WiFi has automatic isolation on the guest band?

I didn't know that. It seems strange that this wouldnt be a standard local option on all devices in WiFi or other settings.

alfred

angela Some routers have AP/Client isolation enabled by default on the guest networks. Others may have an option to manually enable it with or without a guest network.

Just be aware it can "break" a lot of local networking, things like printing, speakers, AirPlay, casting, accessing local file share, sharing files between devices. etc. So, for most home networks, it doesn't make sense to have it enabled by default.