I have a Netgear R6250 router running DD-WRT and a Netgear GS116 unmanaged switch

[G+_Aaron Bishop]

I have a Netgear R6250 router running DD-WRT and a Netgear GS116 unmanaged switch. I'd like to be able to separate out wifi and lan clients to have access to different resources based on their MAC address. Is this even possible without new hardware? I was thinking I could do it with vlans, but couldn't find a way to assign clients based on MAC.

 

I actually only have 2 machines that I currently want in their own network, one wired, one wireless. I could set the 5 GHz AP to be on a vlan and plug the wired machine into a port on the router instead of the switch, but then I lose 5 GHz for all my other devices and it means I can only have up to 3 more wired devices in that vlan. Also I have an IP phone that shares the cable with the wired device that I'd prefer not to have in the same vlan. Any ideas?

[G+_Ben Reese]

Seems like you could set static/reserved IPs for your private machines. Could also setup a VPN server just for internal connections and put those in a different subnet. Certainly seems like it should be possible to segment by MAC.

(And I'm commenting partially because I want to know what others suggest ?)

[G+_Aaron Bishop]

Well I couldn't figure out a way to do this so I ran a cable to the device that was previously on WiFi and set up 2 ports on the router to be on a separate vlan. Not my favorite solution but it does work. I'm wondering if assigning a VLAN affects the ethernet packet which might explain why the router can't set it except when it is coming from a hardware port. Still, assigning WiFi clients to various vlans based on MAC should be possible, but the use case might be so small it hasn't been developed.