Just make firewall rules and you are fine.
Example of your network:
Network: 192.168.10.0/24
Gateway (router): 192.168.10.1
NAS: 192.168.10.2
Workstations: 192.168.10.3 - 192.168.10.20
So firewall rule will be like:
Allow src-nat 192.168.10.0/24
Deny/Drop rest of the incoming connections
Result:
Anyone from your subnet will be able to access NAS
No one outside your subnet will be able to access NAS
How to set:
http://www.freebsd.org/doc/en/articles/linux-users/firewall.html
HolyK, do you have any suggestions on how to do this without being able to edit router ACLs? I am running a FreeNAS Mini for a home storage solution and am on a Asus RT-AC3100. I do not have a enterprise router with ACLs to change.
I have set a static IP on the NAS and have been looking into how within the router to stop that IP from hitting WAN but so far no joy. So I am hoping there is a way to configure the NAS itself. In the end I am just trying to keep my NAS on LAN only.