Creating a wireless network that operates exclusively indoors and has no access to the Internet is a common task for system administrators and advanced users. This configuration is ideal for creating isolated zones where file sharing, media streaming from a local server, or simply ensuring communication between devices without the risk of data leakage is required. Local area network Without a WAN port, it functions stably and is often faster than with an active Internet connection.
In this guide, we'll cover the technical aspects of configuring a router to broadcast a signal but block or simply ignore the connection to the ISP. This solution is suitable for warehouses, hotels, manufacturing facilities, or simply a home media server where external traffic is excessive or unwanted. We'll cover both software settings and physical methods for disconnecting the cable.
Before you begin changing your hardware configuration, you need to have a clear understanding of your network architecture. Router In this case, the router acts as an access point and switch, distributing IP addresses between clients. The absence of a default gateway or the physical absence of a provider cable does not prevent devices from seeing each other and exchanging data at high speed.
Why do you need an isolated WiFi network?
Organizing a network without access to the global network is often dictated by security requirements or the specifics of business processes. For example, hotels provide guests with access to internal content (service catalog, movies on the server), but do not provide free internet. In the corporate sector, this allows for the creation of intranet, protected from external attacks, since the physical disconnection from the Internet makes remote hacking from outside impossible.
Another scenario is creating a backup communication channel or test environment for developers. Programmers often require a clean environment free from external influences, provider firewalls, or traffic restrictions. In such cases, local hosting It becomes the primary work tool. This solution also saves resources if external traffic is charged per gigabyte, while internal data transfer remains free.
It's important to note that the lack of internet access doesn't mean a lack of functionality. You can still use network printers, IP cameras, smart home systems, and NAS storage. All these devices require a stable connection within the perimeter, which is provided by your router.
⚠️ Important: When planning such a network, ensure that connected devices do not have background processes running that constantly attempt to sync with the cloud. This can cause delays in local applications due to timeouts waiting for a response from a non-existent gateway.
Physically disconnecting the WAN port
The easiest and most reliable way to turn any router into a hotspot without internet is to not plug the ISP cable into the appropriate port. Most home routers have a dedicated port labeled WAN or Internet, which is colored blue or yellow. If this port is empty, the router automatically switches to local-only mode.
In this mode, the device continues to function as a DHCP server, issuing addresses to connected clients. However, since there is no physical link to the external network, all traffic remains internal. This guarantees 100% isolation, as no software settings can accidentally forward packets outside if the cable is not plugged in. Physical security It works better here than any software blocker.
If you need to connect your router to another network to access its admin panel, but don't want to share internet with clients, use the LAN ports. Connect a computer to any of the ports for configuration. LAN, and leave the WAN free. After setting up the wireless module, all devices connected via WiFi will be on the same subnet as your computer, but without access to the outside world.
It's worth noting that some modern router models may start flashing an error or globe indicator when they detect a lack of signal on the WAN port, signaling a lack of internet access. This is a normal firmware response and doesn't affect the operation of the local network, but it can be annoying due to the visual noise.
Configuration via the router's web interface
For more flexible management, when the ISP cable is connected but you need to block access for clients, you need to access the router settings. Open a browser and enter the gateway address, usually 192.168.0.1 or 192.168.1.1You will need administrator rights. Go to the section responsible for access control, which may be called Parental Control, Access Control or Firewall.
There are two main approaches to software blocking. The first is to create a rule that blocks all traffic from the LAN to the WAN. The second is to configure a static DNS that doesn't respond to queries, or to use a non-existent default gateway for client devices (although the latter is more difficult to implement without scripting). The most effective is to use MAC address filtering in combination with firewall rules.
Let's look at an example of configuring DHCP blocking. You can leave DHCP enabled but specify an incorrect default gateway address in the allocation settings. However, a more efficient method is to use the "Guest Network" feature. Many routers Asus, Keenetic or Mikrotik The guest profile can be isolated from the main network and completely denied access to the WAN interface, leaving only local access.
☑️ Checking insulation settings
After making changes, be sure to test the results. Connect your smartphone to WiFi and try accessing any website. If the page doesn't load, but local resources (such as the router admin panel or a network folder) are accessible, the settings are correct. Don't forget to save the configuration to prevent the rules from resetting after a device reboot.
Using Access Point Mode (AP Mode)
Many users do not know that switching the router to access point mode (Access Point Mode) often automatically resolves the isolation issue if a bridge with the external interface isn't configured. In this mode, the device disables its router functions (NAT, DHCP server is often disabled or transferred to the main router) and becomes a simple signal relay.
If you're using a second router to extend your network without internet access, connect it via a LAN cable to the first router (which may also be without internet access) or use it standalone. In the settings operating mode Select "Access Point." This will remove the double NAT translation and simplify the network, making it flat and convenient for file sharing between devices on different segments.
The advantage of AP mode is stability. The device doesn't attempt to search for a PPPoE connection, doesn't check for a cable in the WAN port, and doesn't generate unnecessary error logs. This makes WiFi network operation more predictable, especially in video surveillance systems, where constant camera availability without interruptions due to attempts to reconnect to the ISP is crucial.
⚠️ Note: When switching the router to Access Point Mode, its IP address may change. Please write down the new IP address assigned by the main DHCP server to avoid losing access to the device's settings in the future.
For complex infrastructures, such as those in a hotel or large office, AP mode is the de facto standard. A wireless network controller manages multiple access points, creating a unified space (roaming) where clients can roam while remaining within the local network but unable to access the outside world unless permitted by security policies.
Setting up a local server and file sharing
The main purpose of creating a network without the internet is often to access local resources. For such a network to be useful, a server must be deployed on one of the computers or a dedicated device (NAS). This could be a file storage device, a media library (Plex, DLNA), or a local website. SMB protocol (Server Message Block) is a standard for exchanging files on Windows networks.
Set up a static IP address for your server. This is critical, as without internet access, your provider's DNS servers are unavailable, and computer names may not resolve. Use IP addresses like 192.168.1.100 with a mask 255.255.255.0Specify this address in the settings of all client devices as a gateway address (if the router does not assign it automatically) or simply as the resource address for connection.
For multimedia, solutions based on Kodi or VLC, which can scan the local network and find available folders containing videos and music. The lack of internet access will even improve the situation, as players won't waste time checking online metadata, licenses, or plugin updates, playing content instantly from disk.
Data transfer speed in the local network
Using the WiFi 5 (AC) standard, actual file transfer speeds can reach 300-400 Mbps, significantly faster than most home internet plans. This makes the local network ideal for watching 4K video without buffering.
Don't forget to set access rights. Even on a closed network, don't open all folders to all users. Create separate accounts with passwords for accessing sensitive data. In Windows, this is done through the "Sharing" tab in the folder properties and advanced shared folder settings.
Safety and potential risks
Although a network without internet access is considered secure by definition ("air gap"), there are inherent risks. If an attacker physically gets within range of the Wi-Fi, they can connect and attack vulnerable services within the network. WPA2/WPA3 encryption and complex passwords are required, even if there is no internet.
Another risk is infection through connected devices. A laptop with internet access at home can introduce a virus on a flash drive or through the browser cache into your isolated network. Once inside, the malware can spread to all connected devices, including servers hosting important data, even without the ability to send the data outside.
Update your router firmware regularly. Yes, this will require temporarily connecting to the internet or downloading the update on another device and uploading it manually through the web interface. Outdated router firmware may contain vulnerabilities that allow users to bypass local restrictions or gain administrator rights.
Comparison of networking methods
The method you choose depends on your goals and equipment. Below is a table comparing the main approaches to creating a network without the internet.
| Method | Difficulty of setup | Insulation level | Suitable equipment |
|---|---|---|---|
| Physical WAN shutdown | Low | Absolute (100%) | Any router |
| Blocking via Firewall | Average | High (depending on the rules) | Routers with advanced software (Mikrotik, Keenetic) |
| Guest Network | Low | Average (depending on vendor) | Home routers (Asus, TP-Link) |
| Access Point (AP) mode | Low | High (if there is no link) | Any router that supports AP Mode |
As the table shows, physically disconnecting the cable is the most reliable method, requiring little networking expertise. However, for dynamic access control (scheduled internet connection on/off), software-based firewall methods are more suitable.
Frequently Asked Questions (FAQ)
Will Windows updates work on such a network?
No, the operating system won't be able to contact Microsoft update servers because there's no external gateway. Updates will have to be downloaded on another PC and transferred manually, or offline installers will be used.
Is it possible to make it so that only the administrator has internet access?
Yes, this is possible. Set up MAC address filtering: allow WAN access only for your computer's MAC address, and block access for all other computers (guests). This is done in the section Access Control or Parental Control.
Can Smart TV work without the Internet?
Basic functions, such as watching videos from a local server (DLNA/NAS) or mirroring your smartphone screen, will work perfectly. However, online movie theaters, YouTube, and weather widgets will not function.
Do clients on a local network need a static IP?
Not necessarily. The router's built-in DHCP server will assign addresses automatically. A static IP is only needed for the server (the computer hosting the files) so that clients always know where to connect.