Restrict Internet access for some computers, but at the same time all computers see each other on the local network - which switch / router?

Question

network hardware

Hello!

There is a TRENDnet TE100-S16Eplus switch and a Zyxel Keenetic Lite router available. A cable is connected to the router from the provider to provide Internet to the WAN connector. From LAN1 of the router there is a cable to the switch to the first connector, thus providing the Internet for all computers connected to the switch.

As I understand it, judging by the description of this switch, it is unmanaged, that is, it does not have the ability to configure which computer to give the Internet, and which one not to.

Can you please tell me which solution is more or less optimal?

What do I think: buy another unmanaged switch, connect to the LAN2 of the router and disable access to the Internet for the LAN2 port in the admin panel of the router (I'm not sure if this is possible). And will computers connected to the first switch be able to ssh to, for example, computers connected to the second switch?

Answer 1

In Keenetic, you can even configure through the web interface which devices to let on the Internet and which not to let. The only thing is that identification occurs by MAC addresses, so if one device pretends to be another, it will most likely bypass the restrictions.