D-Link Forums
The Graveyard - Products No Longer Supported => Routers / COVR => DIR-655 => Topic started by: bjuhasz on April 12, 2016, 05:17:18 PM
-
I am homeschooling my 8th grader via an online school. I need some help setting our D-Link DIR 655 up to block certain websites that she is accessing on her school managed Chromebook, because she is getting on them to chat with other students and not doing her school work. I have her connected to the D Link wirelessly, and I have it set up for filtering websites for her Chromebook's MAC address. However, when I checked to verify the websites were blocked, I could still get on those sites from her Chromebook. The school has the major Social Media sites blocked, however kids are clever and they have found sites that they can use to chat which is why I need to block them. Not to mention it would be great to have setup for all my kids.
Here's what I have setup: We have AT&T U-verse for our Internet provider. Our U-verse modem is the Arris (formerly Motorola) NVG510. It does NOT allow website blocking or any type of parental controls. (AT&T has a free parental control program, but it isn't compatible with Windows 10) 😕 We have a D-Link DIR655 wireless router that does have all the bells and whistles for parental control. We were using it behind the U-verse internet router as an AP to connect our Blu Ray player and Xbox to the Internet via Ethernet for all the connections.
U verse has instructions on general setup but with a different equipment for parental controls. Here's their recommendation:
SomeJoe7777 (https://forums.att.com/t5/user/viewprofilepage/userid/ 2418201) Expert
There is no true bridge mode on the 2Wire routers. However, you can still configure it such
that almost all functions of your own router will work properly.
1. Set your router's WAN interface to get an IP address via DHCP. This is required at first so
that the 2Wire recognizes your router.
2. Plug your router's WAN interface to one of the 2Wire's LAN interfaces.
3. Restart your router, let it get an IP address via DHCP.
4. Log into the 2Wire router's interface. Go to Settings >
Firewall >
Applications, Pinholes,
and DMZ
5. Select your router under section (1).
6. Click the DMZPlus button under section (2).
7. Click the Save button.
8. Restart your router, when it gets an address via DHCP again, it will be the public outside IP address. At this point, you can leave your router in DHCP mode (make sure the firewall on your router allows the DHCP renewal packets, which will occur every 10 minutes), or you can change your router's IP address assignment on the WAN interface to static, and use the same settings it received via DHCP.
9. On the 2Wire router, go to Settings >
Firewall >
Advanced Configuration
10. Uncheck the following: Stealth Mode, Block Ping, Strict UDP Session Control.
11. Check everything under Outbound Protocol Control except NetBIOS.
12. Uncheck NetBIOS under Inbound Protocol Control.
13. Uncheck all the Attack Detection checkboxes (7 of them).
14. Click Save.
Your router should now be able to route as if the 2Wire was a straight bridge, for the most part.
Mar 16, 2011 6:52:30 PM
View solution in context (https://forums.att.com/t5/ThirdPartyDevices/UverseforBUSINESS2Wire3600HGVbridgemodeoranotherATamp/
mp/2707755#M3631)
Another option is given here: https://forums.att.com/t5/Third-Party-Devices/NVG510-not-bridgeable-no-2210-offered-anymore/m-p/3470303#M9776
I'm fairly tech savvy, however network setup is not one of my strong points. Would either of these set ups work? If so how wold I modify them to the D Link? If not, could give me directions how to make this work with both the Uverse and the d link?
I'd be extremely grateful.
Thanks!
-
Link>Welcome! (http://forums.dlink.com/index.php?topic=48135.0)
- What Hardware version is your router? Look at sticker under the router case.
- Link>What Firmware (http://forums.dlink.com/index.php?topic=47512.0) version is currently loaded? Found on the routers web page under status.
- What region are you located?
Internet Service Provider and Modem Configurations
- For DSL/PPPoE connections on the router, ensure that "Always ON" option is enabled.
- If the ISP modem has a built in router, it's best to bridge the modem. Having 2 routers on the same line can cause connection problems: Link>Double NAT (http://www.practicallynetworked.com/networking/fixing_double_nat.htm) and How NAT Works (http://computer.howstuffworks.com/nat.htm). Call the ISP and ask to see if the ISP modem can be bridged. To tell if the modem is bridged or not, look at the routers web page, Status/Device Info/Wan Section, if there is a 192.168.0.# address in the WAN IP address field, then the modem is not bridged. If the modem can't be bridged then see if the modem has a DMZ option and input the IP address the router gets from the modem and put that into the modems DMZ. Also check the routers DHCP IP address maybe conflicting with the ISP modems IP address of 192.168.0.1. Check to see if this is the same on the ISP modem, and if modem can't be bridged, change the DIR router to 192.168.1.1 or .0.254.
Example of a D-Link router configured for PPPoE with ISP Modem bridged: PPPoE Configuration on a Router (http://forums.dlink.com/index.php?topic=56344.msg219023#msg219023)
Router and Wired Configurations
Some things to try: - Log into the routers web page at 192.168.0.1. Use IE, Opera or FF to manage the router. Besure to log into the Admin account on the router.
- Turn on DNS Relay (http://forums.dlink.com/index.php?topic=45143.0) under Setup/Networking. Link>Finding Faster DNS Addresses using Name Bench (http://forums.dlink.com/index.php?topic=53222.0) and input new DNS addresses under Setup/Internet/Manual.
- Setup DHCP (http://forums.dlink.com/index.php?topic=58017.0) reserved IP addresses for all devices ON the router. Setup/Networking. This ensures each devices gets its own IP address when turned on and connected, eliminates IP address conflicts and helps in troubleshooting and maintain consistency for applications that need to connect as well as mapped drives.
- Ensure devices are set to auto obtain an IP address.
Router Access Control, Blocking, Web Filters and Scheduling FAQ (http://forums.dlink.com/index.php?topic=56479.0)
To set up scheduling:
1. Reserve device IP addresses ON the router under Setup/Networking.
2. Set up a schedule under Tools/Schedule on the routers web page. Customize your dates and times here.
3. Use Advanced/Access Control configured and apply the customized schedule to a policy and to the PC(s) or device(s) desired to be controlled.
4. Ensure Time is set correctly on the router. Tools/Time.
I do believe Setup/Networking/DNS Relay and or Setup/Internet/Manual/Advanced DNS Services need to be enabled along with configuring Reserved IP addresses, Scheduling, and Access Controls.
Additional Info:
How to Block a specific port using Access Control: http://forums.dlink.com/index.php?topic=58731.0 (http://forums.dlink.com/index.php?topic=58731.0)
How to set up Web Filters: http://www.dlink.cc/d-link-wireless/how-to-setup-website-filter-on-d-link-dir-series-router-dir-655.htm (http://www.dlink.cc/d-link-wireless/how-to-setup-website-filter-on-d-link-dir-series-router-dir-655.htm)
How to Block FB: http://forums.dlink.com/index.php?topic=50490.0 (http://forums.dlink.com/index.php?topic=50490.0)
Web Filter How To: http://forums.dlink.com/index.php?topic=5509.0 (http://forums.dlink.com/index.php?topic=5509.0)
-
Thank for a quick reply! I can't get the hardware information because my husband has it mounted to the wall and it's impossible to get down. :P The Firmware Version is 2.11NA , 18, Jul, 2013, copied from the device's status page. As for region I live in Northeast Ohio.
-
Thanks for this info. No need to get HW version. FW v2.xx is Rev B HW.
;)
-
Per this link the NVG510 is somewhat bridgeable.
https://forums.att.com/t5/Third-Party-Devices/NVG510-not-bridgeable-no-2210-offered-anymore/m-p/3470303#M9776
I will try the settings you gave me. Thanks a bunch!
-
You'll need to get with the ISP or someone from that forum and have them help you with your modem and getting the DIR-655 in the DMZ of the ISP modem if it can't be fully bridged. Once the DIR-655 is set up with the ISP modem, then setting up blocking and parental controls should work for you on the 655 router as long as your devices are connecting to the 655 and not the ISP modem.
-
Question- do I plug the Ethernet cord from the Uverse router into the internet port or one of the Ethernet ports on the DIR?
-
Internet port if your going to be using the 655 as the main host router and configuration of parental controls. ;)
-
Thanks! I'm going to set this all up now. I'll either have more questions or I'll post back that it worked.
-
;)
-
no internet connection on D Link. :( I have copied and pasted my settings from both the d Link and the Uverse status pages. Can you let me know what I did wrong? Thanks!
D Link:
GENERAL
Time : 4/6/2016, 12:04:52 PM
Firmware Version : 2.11NA , 18, Jul, 2013
WAN
Connection Type: Static IP
Cable Status : Connected
Network Status : Established
StreamEngine : Disabled
Connection Up Time : 0 Day, 0:54:49
MAC Address : 54:53:ED:33:77:86
IP Address : 108.233.230.161
Subnet Mask : 255.255.0.0
Default Gateway : 108.233.228.1
Primary DNS Server : 212.71.8.11
Secondary DNS Server : 208.67.222.222
Advanced DNS : Disabled
LAN
MAC Address : 1C:7E:E5:35:31:7E
IP Address : 192.168.2.254
Subnet Mask : 255.255.255.0
DHCP Server : Enabled
WIRELESS LAN
Wireless Radio : Enabled
802.11 Mode : 11bgn
Channel Width : 20/40 MHz
Channel : 1
WISH : Inactive
Wi-Fi Protected Setup : Disabled
SSID List :
Network Name (SSID) Guest MAC Address Security Mode
Hasz No 1C:7E:E5:35:31:7E wpa_psk
LAN COMPUTERS
IP Address Name (if any) MAC
192.168.2.102 sony-player 54:42:49:B8:CB:78
192.168.2.100 UNKNOWN 7C:1E:52:7E:4E:53
192.168.2.103 UNKNOWN e8:2a:ea:01:41:86
192.168.2.104 VAIO a4:17:31:d1:af:97
192.168.2.101 android-44c31e21dac8332c 90:18:7c:a4:f3:e8
and here are my uverse:
Home Network Status
Device IPv4 Address 192.168.1.254
DHCPv4 Netmask 255.255.255.0
DHCPv4 Start Address 192.168.1.1
DHCPv4 End Address 192.168.1.1
DHCP Leases Available 0
DHCP Leases Allocated 1
DHCP Primary Pool Private
Secondary Subnet Disabled
Public Subnet
Cascaded Router Status Disabled
IP Passthrough Status On (public IP address)
IP Passthrough Address 108.233.230.161
Interfaces
Interface Status Active Devices Inactive Devices
Ethernet Enabled 1 0
Wi-Fi Disabled 0 0
IPv6
Status Unavailable
IPv4 Statistics
Transmit Packets 76098
Transmit Errors 0
Transmit Discards 0
Receive Packets 73361
Receive Errors 0
Receive Discards 0
Wi-Fi Status
Wi-Fi Radio Status Disabled
Wi-Fi is not enabled.
Click here to configure Wi-Fi on.
LAN Ethernet Statistics
Port 1 Port 2 Port 3 Port 4
State down down up up
Transmit Speed 0 0 100000000 100000000
Transmit Packets 63587 46275
Transmit Bytes 25269808 18934922
Transmit Dropped 0 0
Transmit Errors 0 0
Receive Packets 61945 11845
Receive Bytes 12467188 1653964
Receive Unicast 0 0
Receive Multicast 0 0
Receive Dropped 0 0
Receive Errors 0 0
-
You LAN pool address on the 655 seems to be:
LAN
IP Address : 192.168.2.254
WAN address on the 655 is IP Address : 108.233.230.161
And your address on the Uverse is:
Device IPv4 Address 192.168.1.254
DHCPv4 Netmask 255.255.255.0
DHCPv4 Start Address 192.168.1.1
DHCPv4 End Address 192.168.1.1
You should be getting some internet. What is the IP address the Uverse modem reports for the DIR-655 and is that IP address in it's DMZ? The 655 should be getting a 192.168.1.### on it's WAN port however looking at the WAN address on the 655, seems to be getting a public and maybe the Uverse is passing thru the desired address. What is the IP address your PC is getting when connected to the 655 router? It should be a 192.168.2.###?
-
Thanks this all worked for the setup! I appreciate that. I did get a dynamic dns set up but I am unclear how to set that up to use to block the https websites.
-
Router Access Control, Blocking, Web Filters and Scheduling FAQ (http://forums.dlink.com/index.php?topic=56479.0)
To set up scheduling:
1. Reserve device IP addresses ON the router under Setup/Networking.
2. Set up a schedule under Tools/Schedule on the routers web page. Customize your dates and times here.
3. Use Advanced/Access Control configured and apply the customized schedule to a policy and to the PC(s) or device(s) desired to be controlled.
4. Ensure Time is set correctly on the router. Tools/Time.
I do believe Setup/Networking/DNS Relay and or Setup/Internet/Manual/Advanced DNS Services need to be enabled along with configuring Reserved IP addresses, Scheduling, and Access Controls.
Additional Info:
How to Block a specific port using Access Control: http://forums.dlink.com/index.php?topic=58731.0 (http://forums.dlink.com/index.php?topic=58731.0)
How to set up Web Filters: http://www.dlink.cc/d-link-wireless/how-to-setup-website-filter-on-d-link-dir-series-router-dir-655.htm (http://www.dlink.cc/d-link-wireless/how-to-setup-website-filter-on-d-link-dir-series-router-dir-655.htm)
How to Block FB: http://forums.dlink.com/index.php?topic=50490.0 (http://forums.dlink.com/index.php?topic=50490.0)
Web Filter How To: http://forums.dlink.com/index.php?topic=5509.0 (http://forums.dlink.com/index.php?topic=5509.0)
-
I have scheduling all set up. How do I setup the DNS Relay? Also the link for http://www.dlink.cc/d-link-wireless/how-to-setup-website-filter-on-d-link-dir-series-router-dir-655.htm is invalid.
-
http://www.dlink.cc/d-link-wireless/how-to-setup-website-filter-on-d-link-dir-series-router-dir-655.html (http://www.dlink.cc/d-link-wireless/how-to-setup-website-filter-on-d-link-dir-series-router-dir-655.html)
Just check box enable DNS Relay on the Setup/Networking section of the routers web page.