On 3/26/22 12:20, Peter wrote:
> T <T@invalid.invalid> wrote:
>
>> netsh interface set interface name="Local Area Connection" admin=disabled
>
> I tried that netsh command in a command window but it still requires admin.
>
> netsh interface set interface name="eth0" admin=disabled
> The requested operation requires elevation (Run as administrator).
>
> When I copied it to a shortcut target, it flashed once but did nothing.
>
> I don't want to disable the local network with the software switch.
> I want to turn on and off only the wide area network to the internet.

Hi Peter,

Add the following in front of the command string:

runas /user:Administrator netsh interface set interface name="Local
Area Connection" admin=disabled

Let me know,
-T

On 3/26/22 12:58, T wrote:
> On 3/26/22 12:20, Peter wrote:
>> T <T@invalid.invalid> wrote:
>>
>>> netsh interface set interface name="Local Area Connection"
>>> admin=disabled
>>
>> I tried that netsh command in a command window but it still requires
>> admin.
>>
>> netsh interface set interface name="eth0" admin=disabled
>> The requested operation requires elevation (Run as administrator).
>>
>> When I copied it to a shortcut target, it flashed once but did nothing.
>>
>> I don't want to disable the local network with the software switch.
>> I want to turn on and off only the wide area network to the internet.
>
> Hi Peter,
>
> Add the following in front of the command string:
>
>     runas /user:Administrator netsh interface set interface name="Local
> Area Connection" admin=disabled
>
> Let me know,
> -T

Ooops: forgot the quotes
runas /user:Administrator 'netsh interface set interface name="Local
Area Connection" admin=disabled'

On 3/26/22 12:33, Peter wrote:
> The problem is that software command shuts off the LAN and the WAN.
> I only want to shut off the WAN with the software switch. Not the LAN.

Do you have a separate hub from your Internet modem? Is so, flip the
modem's switch off.

Char Jackson <none@none.invalid> wrote:

> if local networking is
> supposed to stay up the batch file will just remove the default gateway
> and then reinstate it later.

I think a suggestion like that one is what's going to power a software
on/off solution that can turn off/on a WAN while leaving a LAN connected.

Searching I see there are multiple ways Windows can change the DHCP status.
https://blog.shiraj.com/2012/10/netsh-command-to-change-from-static-ip-address-to-dhcp/

Maybe I can give the network adaptor the wrong gateway for an on/off toggle?
netsh interface ip set address name="eth0" static 192.168.0.100 255.255.255.0 192.168.0.1 1

If that approach doesn't disable only the WAN maybe I can use another
Windows command such as wmic, control.exe or devmgmt.msc as described here.
https://www.action1.com/how-to-enable-disable-or-restart-network-adapter/

On 3/26/22 12:45, Peter wrote:
> Char Jackson <none@none.invalid> wrote:
>
>>> How about a (layer 2 MAC bridge) hub with a power switch?
>>
>> AKA Ethernet switch. No one calls it a layer 2 MAC bridge.
>
> That would disable the LAN and WAN where I just want to disable the WAN.
> What is needed is a way to disable only the LAN using a software toggle.

Hi All,

I wonder if goofing up his "default router (gateway)"
IP would solve this?

-T

On 3/26/22 13:08, T wrote:
> On 3/26/22 12:45, Peter wrote:
>> Char Jackson <none@none.invalid> wrote:
>>
>>>> How about a (layer 2 MAC bridge) hub with a power switch?
>>>
>>> AKA Ethernet switch. No one calls it a layer 2 MAC bridge.
>>
>> That would disable the LAN and WAN where I just want to disable the WAN.
>> What is needed is a way to disable only the LAN using a software toggle.
>
> Hi All,
>
> I wonder if goofing up his "default router (gateway)"
> IP would solve this?
>
> -T

Check out

https://www.wincert.net/networking/change-an-ip-address-gateway-and-dns-via-cmd/

Peter wrote:
> Do you have a network on/off switch that can be double clicked to turn the
> network off and then double clicked to turn the network back on?

Get a wireless switch and plug the wan modem into it.

https://www.harborfreight.com/indoor-wireless-remote-system-3-pc-62575.html

"Peter" <occassionally-confused@nospam.co.uk> wrote

| That will disable both the LAN and the WAN.
| I am looking for a software switch to toggle the WAN on/off but not the
LAN.
|

You mean you want to disconnect from the Internet
but not the computer in the other room? I've never enabled
any networking, so it's the same to me. For what you want
I expect you'd need to pull the cable input on the router.

I don't know what DHCP would do for you. You can set it
to fixed on a given machine, or you can let the router ssign
it, but either way you'll need it to contact the network at all.

If you could use a software solution from your computer
that would be a nasty router vulnerability. It might be possible
to log into the router to block outgoing, but I've never noticed
that. Usually people want Internet connection and will only
set up a server firewall if they want secure intranet.

wasbit <wasbitRemove@hotmailt.com> wrote:

> Network Disabler
> - https://www.sordum.org/9660/net-disabler-v1-1/

Powerful maybe.
Confusing definitely.

Can you help explain?

When I ran the NetDisabler_x64.exe command there were four options.
Block with DNS
Block with Windows Firewall
Block with Proxy
Disable Network Adapter

You could choose to select more than one but all my tests below were done
with only one selected because that was confusing enough to decipher.

The one that was the most confusing was the "Block with DNS" option.
Especially when I tried it both on and off of a VPN service.
Can someone help explain the results I got testing NetDisabler.exe?

Block with DNS
Taskbar icon indicates "monitor"
LAN: ping 192.168.1.1
Reply from 192.168.1.1: bytes=32 time=1ms TTL=64
WAN: ping google.com
Ping request could not find host google.com.
Please check the name and try again.
No change to the LAN ping when done while on vpn (the LAN ping worked).
But the WAN ping now responds to a (different than normal) Google server.

Block with Windows Firewall
Taskbar icon indicates "world"
LAN: ping 192.168.1.1
General failure.
WAN: ping google.com
Ping request could not find host google.com.
Please check the name and try again.
Disables vpn when done while on vpn
(so both LAN & WAN pings fail on or off VPN).

Block with Proxy
Taskbar icon indicates "monitor"
LAN: ping 192.168.1.1
Reply from 192.168.1.1: bytes=32 time=1ms TTL=64
WAN: ping google.com
Reply from 142.250.72.142: bytes=32 time=15ms TTL=116
No effect to the LAN or WAN ping when done while on vpn
(so both LAN & WAN pings still worked on or off VPN).

Disable Network Adapter
Taskbar icon indicates "world"
LAN: ping 192.168.1.1
Request timed out.
Reply from [my isp ip]: Destination host unreachable.
WAN: ping google.com
Ping request could not find host google.com.
Please check the name and try again.
Disables vpn when done while on vpn
(so both LAN & WAN pings fail on or off VPN).

Mayayana <mayayana@invalid.nospam> wrote:

> You mean you want to disconnect from the Internet
> but not the computer in the other room?

Yes. I want only the desktop with the software killswitch to lose only its
connection to the internet but not to the local network and I want every
other computer in the house to be unaffected by this action.

(Of course each computer would have its own software killswitch.)

> I've never enabled
> any networking, so it's the same to me. For what you want
> I expect you'd need to pull the cable input on the router.

Pulling that cable will affect all the other machines unnecessarily.

> I don't know what DHCP would do for you. You can set it
> to fixed on a given machine, or you can let the router ssign
> it, but either way you'll need it to contact the network at all.

I just need the software switch to disconnect the one desktop
from the WAN but not from the LAN (with or without vpn running).

> If you could use a software solution from your computer
> that would be a nasty router vulnerability. It might be possible
> to log into the router to block outgoing, but I've never noticed
> that. Usually people want Internet connection and will only
> set up a server firewall if they want secure intranet.

I think the software by wasbit is getting closer to the solution.
https://www.sordum.org/9660/net-disabler-v1-1/

That Net Disabler graphical interface has four check boxes
1 - Disable Network Adapter
2 - Block with DNS
3 - Block with Proxy
4 - Block with Windows Firewall

But it can also run the program from the command line.

Usage: <command>
Commands:
/E : Enable Internet
/D : Disable Internet
/T : Target Action ( 1=Drive, 2=DNS, 3=Proxy, 4=Firewall )
/Q : Queries the Internet Blocked Status

Examples:
NetDisabler_x64.exe /E
NetDisabler_x64.exe /D
NetDisabler_x64.exe /Q
NetDisabler_x64.exe /D /T 1
NetDisabler_x64.exe /D /T 12
NetDisabler_x64.exe /D /T 13
NetDisabler_x64.exe /D /T 1234

When I tested Net Disabler many confusing things happened which I'm still
trying to wrap my head around. It does strange things depending on what box
is checked and which ping is run and whether or not VPN is active.

To keep the results simple I only ticked on a single GUI checkbox at a time.
And then I ran a LAN ping (ping 192.168.1.1) & a WAN ping (ping google.com).
I ran the test first with VPN not running & then with the VPN running.

If you can take a look at the results, I provided them to wasbit's response.

T <T@invalid.invalid> wrote:

> runas /user:Administrator 'netsh interface set interface name="Local
> Area Connection" admin=disabled'

When I tried that in a regular or admin cmd window, it doesn't like
something about the syntax because it spits out the runas command syntax.

runas /user:Administrator 'netsh interface set interface name="eth0" admin=disabled'
Same with
runas /user:Administrator 'netsh interface set interface name="eth0" disabled'

RUNAS USAGE:

RUNAS [ [/noprofile | /profile] [/env] [/savecred | /netonly] ]
/user:<UserName> program

RUNAS [ [/noprofile | /profile] [/env] [/savecred] ]
/smartcard [/user:<UserName>] program

RUNAS /trustlevel:<TrustLevel> program

/noprofile specifies that the user's profile should not be loaded.
This causes the application to load more quickly, but
can cause some applications to malfunction.
/profile specifies that the user's profile should be loaded.
This is the default.
/env to use current environment instead of user's.
/netonly use if the credentials specified are for remote
access only.
/savecred to use credentials previously saved by the user.
/smartcard use if the credentials are to be supplied from a
smartcard.
/user <UserName> should be in form USER@DOMAIN or DOMAIN\USER
/showtrustlevels displays the trust levels that can be used as arguments
to /trustlevel.
/trustlevel <Level> should be one of levels enumerated
in /showtrustlevels.
program command line for EXE. See below for examples

Examples:
> runas /noprofile /user:mymachine\administrator cmd
> runas /profile /env /user:mydomain\admin "mmc %windir%\system32\dsa.msc"
> runas /env /user:user@domain.microsoft.com "notepad \"my file.txt\""

NOTE: Enter user's password only when prompted.
NOTE: /profile is not compatible with /netonly.
NOTE: /savecred is not compatible with /smartcard.

On 3/26/22 15:26, Peter wrote:
> T <T@invalid.invalid> wrote:
>
>> runas /user:Administrator 'netsh interface set interface name="Local
>> Area Connection" admin=disabled'
>
> When I tried that in a regular or admin cmd window, it doesn't like
> something about the syntax because it spits out the runas command syntax.
>
> runas /user:Administrator 'netsh interface set interface name="eth0" admin=disabled'
> Same with
> runas /user:Administrator 'netsh interface set interface name="eth0" disabled'
>
>
> RUNAS USAGE:
>
> RUNAS [ [/noprofile | /profile] [/env] [/savecred | /netonly] ]
> /user:<UserName> program
>
> RUNAS [ [/noprofile | /profile] [/env] [/savecred] ]
> /smartcard [/user:<UserName>] program
>
> RUNAS /trustlevel:<TrustLevel> program
>
> /noprofile specifies that the user's profile should not be loaded.
> This causes the application to load more quickly, but
> can cause some applications to malfunction.
> /profile specifies that the user's profile should be loaded.
> This is the default.
> /env to use current environment instead of user's.
> /netonly use if the credentials specified are for remote
> access only.
> /savecred to use credentials previously saved by the user.
> /smartcard use if the credentials are to be supplied from a
> smartcard.
> /user <UserName> should be in form USER@DOMAIN or DOMAIN\USER
> /showtrustlevels displays the trust levels that can be used as arguments
> to /trustlevel.
> /trustlevel <Level> should be one of levels enumerated
> in /showtrustlevels.
> program command line for EXE. See below for examples
>
> Examples:
> > runas /noprofile /user:mymachine\administrator cmd
> > runas /profile /env /user:mydomain\admin "mmc %windir%\system32\dsa.msc"
> > runas /env /user:user@domain.microsoft.com "notepad \"my file.txt\""
>
> NOTE: Enter user's password only when prompted.
> NOTE: /profile is not compatible with /netonly.
> NOTE: /savecred is not compatible with /smartcard.

I remember that elevate command being a pain in the butt.

It is not the way you want ot go anyway. You want the local network in
tact but he WAN disabled.

On Sat, 26 Mar 2022 19:20:44 +0000, Peter
<occassionally-confused@nospam.co.uk> wrote:

>I don't want to disable the local network with the software switch.
>I want to turn on and off only the wide area network to the internet.

To achieve what you want, you'll need to remove the configuration for
your default route (gateway), or set it to any IP address within your
subnet, currently used or unused, *OTHER THAN* the IP address of your
actual gateway. To demonstrate the concept, you can make that config
change manually. Remove the gateway address and note that you lose WAN
connectivity without affecting LAN connectivity, and the change is
immediate. Likewise, when reconfiguring the proper gateway address, WAN
connectivity is immediately restored.

Having demonstrated that that's what you want, the next step is to
create (or find & use an existing) batch file or other utility to
accomplish the steps that you performed manually. However you proceed,
the gateway address (default route) is the key.

Peter wrote:

> I don't want to disable the local network with the software switch.
> I want to turn on and off only the wide area network to the internet.

use netsh to either remove/add your default gateway, or add/remove your default
route

On Sat, 26 Mar 2022 19:39:03 +0000, Peter wrote:
> Andy Burns <usenet@andyburns.uk> wrote:
>
> > [quoted text muted]
> >> My PC networks through Wifi. I don't know what if anything Airplane
> >> Mode would do with a wired Ethernet connection.
> >
> > It doesn't disable wired networking.
>
> Manually disabling the network icon takes too many steps.
> And there is no wifi on this desktop computer. Only ethernet.
>

Let me Google that for you:
windows 10 software disable ethernet

The very first hit was
<https://wccftech.com/how-to/how-to-disable-network-adapters-on-
windows-10/>

It gives a command-line way to disable Ethernet. You can encode that
in a batch file, and set it to run as administrator.

To create a batch file to re-enable Ethernet, change "disable" to
"enable".

The comments show a PowerShell command as an alternative, but don't
state whether it needs to be run as administrator. You could
experiment.

--
Stan Brown, Tehachapi, California, USA https://BrownMath.com/
Shikata ga nai...

Char Jackson <none@none.invalid> wrote:

> Remove the gateway address and note that you lose WAN
> connectivity without affecting LAN connectivity, and the change is
> immediate. Likewise, when reconfiguring the proper gateway address, WAN
> connectivity is immediately restored.

Good advice to disconnect the gateway which keeps the LAN but kills the WAN
A search found multiple possibilities.

Using Windows Task Scheduler
https://www.raymond.cc/blog/automatic-vpn-kill-switch/

Network Kill Switch
https://sourceforge.net/projects/subproject.network-ip-tools.p/

VPN Watcher
https://www.raymond.cc/blog/download/did/3743/

VPN Lifeguard
https://www.raymond.cc/blog/download/did/3744/

VPNCheck
https://www.raymond.cc/blog/download/did/3745/

Simple VPN Kill Switch Batch Script
https://www.raymond.cc/blog/download/did/3746/

Comodo Kill Switch
https://offlinemn.tistory.com/11

Which do you use most often?

Andy Burns <usenet@andyburns.uk> wrote:

>> I don't want to disable the local network with the software switch.
>> I want to turn on and off only the wide area network to the internet.
>
> use netsh to either remove/add your default gateway, or add/remove your default
> route

That advice helped me zero in on this script which does what you suggest.
What it doesn't do is "toggle" the network with just a doubleclick.

It requires manual intervention which needs to be removed to toggle on/off.
But at least somehow it bypasses User Account Control prompts which is nice!

Simple VPN Kill Switch Batch Script
https://www.raymond.cc/blog/download/did/3746/
https://raymondcc.r.worldssl.net/LiquidVPN-Kill-Switch-3746.zip
The zip archive password is "raymondcc" (without the doublequotes).
Name: LiquidVPN-Kill-Switch.bat
Size: 2747 bytes (2 KiB)
SHA256: 933B7BD76EECB04D57A1A55E972C868D0460EB21021C16ED0ABC0B02EBD532A7

@echo off
:: GetAdmin
:-------------------------------------
:: Verify permissions
>nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system"
:: On Error No Admin
if '%errorlevel%' NEQ '0' (
echo Getting administrative privileges...
goto DoUAC
) else ( goto getAdmin )
:DoUAC
echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"
set params = %*:"=""
echo UAC.ShellExecute "cmd.exe", "/c %~s0 %params%", "", "runas", 1 >> "%temp%\getadmin.vbs"
"%temp%\getadmin.vbs"
del "%temp%\getadmin.vbs"
exit /B
:getAdmin
pushd "%CD%"
CD /D "%~dp0"
:--------------------------------------

@echo off
:: CHANGE DEFAULT GW IP BELOW
set defgw=192.168.0.1

@For /f "tokens=3" %%1 in (
'route.exe print 0.0.0.0 ^|findstr "\<0.0.0.0.*0.0.0.0\>"') Do set defgw=%%1
cls
:start
cls
echo.
color 0C
echo LiquidVPN's Simple VPN Kill Switch, ver. 0.1 - by LiquidVPN
echo.
echo.
echo Your routers gateway is probably "%defgw%"
echo -if nothing appears or its incorrect, add it manually (Press '3')
echo.
echo USAGE:
echo.
echo -Press "1" to Enable Kill Switch (IP "%defgw%")
echo -Press "2" to Disable Kill Switch (IP "%defgw%")
echo -Press "3" to manually set default gateway if its not detected above.
echo -Press "h" for Kill Switch Help
echo -Press "x" to exit Kill Switch.
echo.
set /p option=Your option:
if '%option%'=='1' goto :option1
if '%option%'=='2' goto :option2
if '%option%'=='3' goto :option3
if '%option%'=='x' goto :exit
if '%option%'=='h' goto :help
echo Insert 1, 2, x or h
timeout 3
goto start
:option1
route delete 0.0.0.0 %defgw%
echo Default gateway "%defgw%" removed
timeout 3
goto start
:option2
route add 0.0.0.0 mask 0.0.0.0 %defgw%
echo Defaulte gateway "%defgw%" restored
timeout 3
goto start
:option3
echo
set /p defgw=your gw IP (e.g. 192.168.0.1):
goto start
:help
cls
echo.
echo.
echo ======================
echo This simple kill switch removes your default gateway
echo and blocks traffic from reaching the internet when
echo your VPN gets disconnected.
echo.
echo Here is how you use it.
echo.
echo Step 1: Connect to LiquidVPN
echo Step 2: Enable LiquidVPN's Kill Switch (option "1")
echo.
echo Now Any internet traffic will pass through LiquidVPN only.
echo.
echo - If your VPN gets disconnected so will your internet.
echo - Disable the Kill Switch and reconnect.
echo.
echo.
echo When you disconnect from LiquidVPN follow these steps
echo to reconnect or to browse the internet normally.
echo.
echo Step 1: Close any software that may leak your real IP
echo Step 2: Disable the LiquidVPN kill switch (Option "2")
echo Step 3: Reconnect to LiquidVPN and enable the kill switch (Option "1")
echo.
timeout /T -1
goto start
:exit
exit

On 3/27/22 12:11, this is what Peter wrote:
> Andy Burns <usenet@andyburns.uk> wrote:
>
>>> I don't want to disable the local network with the software switch.
>>> I want to turn on and off only the wide area network to the internet.
>>
>> use netsh to either remove/add your default gateway, or add/remove your default
>> route
>
> That advice helped me zero in on this script which does what you suggest.
> What it doesn't do is "toggle" the network with just a doubleclick.
>
> It requires manual intervention which needs to be removed to toggle on/off.
> But at least somehow it bypasses User Account Control prompts which is nice!
>
> Simple VPN Kill Switch Batch Script
> https://www.raymond.cc/blog/download/did/3746/
> https://raymondcc.r.worldssl.net/LiquidVPN-Kill-Switch-3746.zip
> The zip archive password is "raymondcc" (without the doublequotes).
> Name: LiquidVPN-Kill-Switch.bat
> Size: 2747 bytes (2 KiB)
> SHA256: 933B7BD76EECB04D57A1A55E972C868D0460EB21021C16ED0ABC0B02EBD532A7
>
> @echo off
>
> :: GetAdmin
> :-------------------------------------
> :: Verify permissions
> >nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system"
>
> :: On Error No Admin
> if '%errorlevel%' NEQ '0' (
> echo Getting administrative privileges...
> goto DoUAC
> ) else ( goto getAdmin )
>
> :DoUAC
> echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"
> set params = %*:"=""
> echo UAC.ShellExecute "cmd.exe", "/c %~s0 %params%", "", "runas", 1 >> "%temp%\getadmin.vbs"
>
> "%temp%\getadmin.vbs"
> del "%temp%\getadmin.vbs"
> exit /B
>
> :getAdmin
> pushd "%CD%"
> CD /D "%~dp0"
> :--------------------------------------
>
>
> @echo off
> :: CHANGE DEFAULT GW IP BELOW
> set defgw=192.168.0.1
>
>
> @For /f "tokens=3" %%1 in (
> 'route.exe print 0.0.0.0 ^|findstr "\<0.0.0.0.*0.0.0.0\>"') Do set defgw=%%1
> cls
> :start
> cls
> echo.
> color 0C
> echo LiquidVPN's Simple VPN Kill Switch, ver. 0.1 - by LiquidVPN
>
> echo.
> echo.
> echo Your routers gateway is probably "%defgw%"
> echo -if nothing appears or its incorrect, add it manually (Press '3')
> echo.
> echo USAGE:
> echo.
> echo -Press "1" to Enable Kill Switch (IP "%defgw%")
> echo -Press "2" to Disable Kill Switch (IP "%defgw%")
> echo -Press "3" to manually set default gateway if its not detected above.
> echo -Press "h" for Kill Switch Help
> echo -Press "x" to exit Kill Switch.
> echo.
> set /p option=Your option:
> if '%option%'=='1' goto :option1
> if '%option%'=='2' goto :option2
> if '%option%'=='3' goto :option3
> if '%option%'=='x' goto :exit
> if '%option%'=='h' goto :help
> echo Insert 1, 2, x or h
> timeout 3
> goto start
> :option1
> route delete 0.0.0.0 %defgw%
> echo Default gateway "%defgw%" removed
> timeout 3
> goto start
> :option2
> route add 0.0.0.0 mask 0.0.0.0 %defgw%
> echo Defaulte gateway "%defgw%" restored
> timeout 3
> goto start
> :option3
> echo
> set /p defgw=your gw IP (e.g. 192.168.0.1):
> goto start
> :help
> cls
> echo.
> echo.
> echo ======================
> echo This simple kill switch removes your default gateway
> echo and blocks traffic from reaching the internet when
> echo your VPN gets disconnected.
> echo.
> echo Here is how you use it.
> echo.
> echo Step 1: Connect to LiquidVPN
> echo Step 2: Enable LiquidVPN's Kill Switch (option "1")
> echo.
> echo Now Any internet traffic will pass through LiquidVPN only.
> echo.
> echo - If your VPN gets disconnected so will your internet.
> echo - Disable the Kill Switch and reconnect.
> echo.
> echo.
> echo When you disconnect from LiquidVPN follow these steps
> echo to reconnect or to browse the internet normally.
> echo.
> echo Step 1: Close any software that may leak your real IP
> echo Step 2: Disable the LiquidVPN kill switch (Option "2")
> echo Step 3: Reconnect to LiquidVPN and enable the kill switch (Option "1")
> echo.
> timeout /T -1
> goto start
> :exit
> exit

Not nitpicking but " is called quote and ' is called apostrophe. There is no double quote symbol, just "" meaning null or nothing string.
At least the way I learned it in English (US) classes.

On 3/26/22 14:20, Peter wrote:
> T <T@invalid.invalid> wrote:
>
>> netsh interface set interface name="Local Area Connection" admin=disabled
>
> I tried that netsh command in a command window but it still requires admin.
>
> netsh interface set interface name="eth0" admin=disabled
> The requested operation requires elevation (Run as administrator).
>
> When I copied it to a shortcut target, it flashed once but did nothing.
>
> I don't want to disable the local network with the software switch.
> I want to turn on and off only the wide area network to the internet.

You could disable WAN access by turning off power to your modem. of
disconnecting the cable.

--
Mark Lloyd
http://notstupid.us/

"Democracy is the great love of the failures and cowards of life." [R.J.
Rushdoony, _Thy Kingdom Come_,1978]

On 3/26/22 15:03, T wrote:
> On 3/26/22 12:33, Peter wrote:
>> The problem is that software command shuts off the LAN and the WAN.
>> I only want to shut off the WAN with the software switch. Not the LAN.
>
> Do you have a separate hub from your Internet modem?  Is so, flip the
> modem's switch off.

Wouldn't that be separate ROUTER? Routers usually have hubs (and WiFi
access points) in the same package, but that wouldn't affect being able
to turn the modem off.

If you can't turn off the modem can you switch the internet connection
to it. I know there are switches for RG6/RG59 cables.

--
Mark Lloyd
http://notstupid.us/

"Democracy is the great love of the failures and cowards of life." [R.J.
Rushdoony, _Thy Kingdom Come_,1978]

On 3/26/22 15:04, Peter wrote:
> Char Jackson <none@none.invalid> wrote:
>
>> if local networking is
>> supposed to stay up the batch file will just remove the default gateway
>> and then reinstate it later.
>
> I think a suggestion like that one is what's going to power a software
> on/off solution that can turn off/on a WAN while leaving a LAN connected.
>
> Searching I see there are multiple ways Windows can change the DHCP status.
> https://blog.shiraj.com/2012/10/netsh-command-to-change-from-static-ip-address-to-dhcp/
>
> Maybe I can give the network adaptor the wrong gateway for an on/off toggle?
> netsh interface ip set address name="eth0" static 192.168.0.100 255.255.255.0 192.168.0.1 1
>
> If that approach doesn't disable only the WAN maybe I can use another
> Windows command such as wmic, control.exe or devmgmt.msc as described here.
> https://www.action1.com/how-to-enable-disable-or-restart-network-adapter/

One disadvantage of a software solution is that software can turn it
back on.

--
Mark Lloyd
http://notstupid.us/

"Democracy is the great love of the failures and cowards of life." [R.J.
Rushdoony, _Thy Kingdom Come_,1978]

On Mon, 28 Mar 2022 20:06:00 -0500, Mark Lloyd <not.email@all.invalid>
wrote:

>On 3/26/22 15:04, Peter wrote:
>> Char Jackson <none@none.invalid> wrote:
>>
>>> if local networking is
>>> supposed to stay up the batch file will just remove the default gateway
>>> and then reinstate it later.
>>
>> I think a suggestion like that one is what's going to power a software
>> on/off solution that can turn off/on a WAN while leaving a LAN connected.
>>
>> Searching I see there are multiple ways Windows can change the DHCP status.
>> https://blog.shiraj.com/2012/10/netsh-command-to-change-from-static-ip-address-to-dhcp/
>>
>> Maybe I can give the network adaptor the wrong gateway for an on/off toggle?
>> netsh interface ip set address name="eth0" static 192.168.0.100 255.255.255.0 192.168.0.1 1
>>
>> If that approach doesn't disable only the WAN maybe I can use another
>> Windows command such as wmic, control.exe or devmgmt.msc as described here.
>> https://www.action1.com/how-to-enable-disable-or-restart-network-adapter/
>
>One disadvantage of a software solution is that software can turn it
>back on.

The OPs reasons for wanting to disable WAN access include "when weird
things happen or when installing software" and "just to disable the WAN
when walking away from the computer".

Which software, specifically, is going to reinstate the proper config?

On Mon, 28 Mar 2022 20:04:02 -0500, Mark Lloyd <not.email@all.invalid>
wrote:

>On 3/26/22 15:03, T wrote:
>> On 3/26/22 12:33, Peter wrote:
>>> The problem is that software command shuts off the LAN and the WAN.
>>> I only want to shut off the WAN with the software switch. Not the LAN.
>>
>> Do you have a separate hub from your Internet modem?  Is so, flip the
>> modem's switch off.
>
>Wouldn't that be separate ROUTER?

It could be a router that's separate from the modem, but it could also
be a switch that's separate from the router. In 2022, it's extremely
unlikely to be a hub.

Char,

> The OPs reasons for wanting to disable WAN access include "when weird
> things happen or when installing software" and "just to disable the WAN
> when walking away from the computer".

Yeah, that was the feeling I got too.

> Which software, specifically, is going to reinstate the proper config?

DHCP ?

Regards,
Rudy Wieser

"Char Jackson" <none@none.invalid> wrote

| The OPs reasons for wanting to disable WAN access include "when weird
| things happen or when installing software" and "just to disable the WAN
| when walking away from the computer".
| | Which software, specifically, is going to reinstate the proper config?
|

I think the idea is to not have to depend on that. I've
seen Win10 turn on Windows Update and BITS service,
then do an update without asking. And that's not even
getting into issues like malware or misbehaving commercial
software. If you just pull the wire, and don't have WiFi set
up, then you don't have to worry about whether you know
all possible software risks.