Originally Posted by
ScottC
Get yourself a router that does dual radios and create a guest network. That'll keep him off your portion of the network.
Don't need dual radios for that. I operate 4 different (hidden) SSIDs using a single radio in my router. Different SSIDs for different purposes, with different authentication, encryption and firewall rules.
One of those SSIDs is for guest use. I simply disable it when not in use. Its a very quick and simple task to enable it when I have a guest that requires internet access - and the internet is all it can access.