• November 01, 2024, 04:23:10 AM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: Access control mysteriously stopped working  (Read 6687 times)

NetworkNoob

  • Level 1 Member
  • *
  • Posts: 4
Access control mysteriously stopped working
« on: October 21, 2013, 10:43:25 PM »

Hi All

I've had access control set up and working for a few months now. I was adding another schedule this weekend which seemed to break everything that was working and kill all the internet access to the router.
Thoughts?

Here are the details:
DIR 655
Hardware B1
Firmware 2.00NA
Cox Cable Motorola Surfboard Modem with a single static IP
I'm using the 655 as both the router and the wireless access point.
The 655 pipes to a DLink 16 port switch to handle the LAN traffic

[] I've been setting up each schedule using MAC ID's instead of IP addresses.
[] Connections to be managed are both LAN and wifi connections
[] None of the schedules cross the midnight time/day change.
[] In the past I had trouble with the router keeping correct time so now it is set up using the NTP server.
[] I'm managing the router using IE, but in the past when I first started scheduling things I was using Chrome on a Mac.
[] I've power cycled the router to see if it would help and it doesn't.
[] I haven't done a firmware upgrade because the router works pretty well except for this new thing.

Here's some more details of how I set up scheduling for about 9 schedules that worked great:
[] I'd create a new schedule with the wizard
[] In the Advanced/Access control I'd create a new policy using the new schedule
[] I'd save everything and it would work fine.

[] This weekend I added a new policy for two computers, one LAN and one WiFi from 5AM to 7:30AM so the kids have no incentive to get up early.
[] After I saved the new policy all my internet connections were killed, all LAN and Wifi connections irregardless of time of day.
[] I removed the new policy, but the problem persisted.
[] I removed all unused policies, but the problem persisted.
[] The only thing I can do at this point is an all or nothing. Either "Enable Access Control" is unchecked and everyone has everything or the box is checked and all connections are dead.

I've read the following posts to no avail.
http://forums.dlink.com/index.php?topic=42971.0
http://forums.dlink.com/index.php?topic=46621.0
http://forums.dlink.com/index.php?topic=42514.0

Any help would be much appreciated, including suggestions for other DLink Routers that might be better at handling access control using MAC ID's. (I'd use IP addresses but can't seem to "lock" them to a device with my current 655 firmware as the instructions to do so here on the forum appear to be different than my current firmware.)

-john

Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Access control mysteriously stopped working
« Reply #1 on: October 22, 2013, 07:05:06 AM »

Has a Factory Reset been performed and then set up from scratch?

Setup DHCP reserved IP addresses for all devices ON the router. Setup/Networking. This ensures each devices gets its own IP address when turned on and connected, eliminates IP address conflicts and helps in troubleshooting.

Set current Time Zone, Date and Time. Use an NTP Server feature. Tools/Time.
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

NetworkNoob

  • Level 1 Member
  • *
  • Posts: 4
Re: Access control mysteriously stopped working
« Reply #2 on: October 23, 2013, 01:59:42 PM »

So this morning before doing the factory reset I decided to troubleshoot the problem a bit since it takes a good chunk of time to rebuild all the schedules. I wasn't sure how to save a config.bin file of my current set up and I wasn't completely convinced that saving then loading a .bin file wouldn't reintroduce the problem.

Without doing a factory reset I decided to try to disable each policy and test and see if that would allow my computers to access the internet. Remember the problem was that for whatever reason, if "enable access control" was switched on, it would kill all internet access whether LAN or wireless and whether it had been listed on a policy. Everything was shut down.

I have nine policies (Max 15 total available) and on the third policy I found that if I disabled it and saved the internet would be restored and work as expected. Realizing that it could be the schedule that was messing things up I deleted the schedule connected to the policy, saved, rebooted, ensured that it was really gone then re-wrote a similar schedule which I hooked up to the policy. (Note that all my policies are to block all access, which was working fine and kept the kids off the internet when they weren't supposed to be on)

For some reason with a new schedule enabling the problem policy would still kill all the internet access with the router so I deleted the policy (which tenaciously didn't want to be deleted and had to do it twice.)

Deleting the entire policy and the schedule has allowed me to at least save the 8 remaining policies and schedules and everything sort of works enough to keep my wife happy. I was even able to make a new test schedule (using random times and days, not similar to the one I deleted) and that new policy did not interfere with accessing the internet so it seems that I can make new access control plans without problems. Now I just need to figure out what it was in the other one I deleted that made it not work as expected.

I consider myself a Luddite with respect to technology and implemented access control so there would be no argument from the kids about when to get off the internet. It took me some time to understand all this, so here are my tips for setting up access control on your DIR 655:

[] Use the NTP Server. I found this out a few months ago when I first set things up because for whatever reason the internal clock of the 655 was built in a different part of the universe and cannot tell time or date in any manner whatsoever.

[] It seems counter intuitive, but when you enable access control, you actually need to set up your schedules first which is in the tools/schedules tab no where near the advanced/access control tab. I make the name of the schedule and the name of the policy similar but not identical so I can know which is which. So my schedule might be named "Tom7pm10pm" and the access control policy might be named "TomEveningLaptop"

[] Once you build a schedule you need to connect to a policy. The schedule tells when things happen, the policy tells the router who (which device) is affected by the schedule and what to do. (Log, Limit or Deny all access)

[] I use the MAC ID since it is like a serial number of device. IP addresses seem too easy to manipulate.

[] It seems you can make 15 policies and 35 schedules.

It would be great if D-Link would update their firmware to make it easier to manage access but for now at least I've gotten it to work. (I bought a D Link Cloud router with an app but never got that to work correctly which is why I've reverted to the dependable 655)

If I ever figure out what makes the router choke on certain policies I'll you all know, maybe it will help someone.

-john
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Access control mysteriously stopped working
« Reply #3 on: October 23, 2013, 02:07:29 PM »

I recommend Factory resetting the router and starting from scratch, when you get time. There could be something corrupt in the configuration.

Also you are still on shipping FW, could be a bug here, you might try v2.03 and test. If you do decide to update, please follow this:
FW Update Process

To set up scheduling:
1. Reserve device IP addresses ON the router under Setup/Networking.
2. Set up a schedule under Tools/Schedule on the routers web page. Customize your dates and times here.
3. Use Access Control under Advanced to apply the customized schedule to a policy and to the PC(s) desired to be controlled. 
4. Ensure Time is set correctly on the router. Tools/Time.

Keep us posted.
« Last Edit: October 23, 2013, 02:13:27 PM by FurryNutz »
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

NetworkNoob

  • Level 1 Member
  • *
  • Posts: 4
Re: Access control mysteriously stopped working
« Reply #4 on: October 23, 2013, 03:40:13 PM »

Cool, I will try it this weekend.

Best Regards,

-john

Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Access control mysteriously stopped working
« Reply #5 on: October 24, 2013, 06:57:56 AM »

 ;)
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.

NetworkNoob

  • Level 1 Member
  • *
  • Posts: 4
Re: Access control mysteriously stopped working
« Reply #6 on: October 25, 2013, 01:05:00 PM »

Well, I've updated to FW2.03 so we'll see tonight if all the schedules and access control works.

-john
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Access control mysteriously stopped working
« Reply #7 on: October 25, 2013, 01:18:01 PM »

Ok, keep us posted.  ;)
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.