Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Longs]

I have a number of access control rules and schedules set up to block specific computers' access to the internet on certain days and times.  I'm wondering if anyone knows what happens when two rules might be viewed as conflicting.

For example, I block all internet access to a specific PC based on MAC address at certain hours - say 10 p.m. to 6:00 a.m., so outside those hours it has full access.  I enable it by having it "checked" in the access control list

If i ALSO set up a rule to block the same PC based on MAC address "always" and i ALSO have that checked in the access control list, how does the router determine whether to block the PC?

I at first assumed that the more restrictive (blocking always) would be in effect, but that doesn't seem to be the case. 

Does anyone know how the router resolves this?  I'd be hard pressed to think it's something like which rule was created first, or anything along those lines.

For now, I'm trying "unchecking" the less restrictive rule when i want the more restrictive rule to be in effect, so the router doesn't think it's supposed to be allowing and denying access to a specific PC at a particular time.

I'm wondering if other people are doing the same kinds of things when they say "access control doesn't work"... the documentation on this topic is not very good.

Thoughts?

[Sammydad1]

Hi,

I have the very same setup here with my teenagers.  Normally they are restricted by time of day and day of week, say M-TH (school nites) time= 10 pm to 9 AM.  On occasion to ummmm "Punish" for evil deeds, I will block all access to the internet, they should still be able to print on the local LAN for their homework, just no internet access ( but this router doesn't always cooperate...a different thread) so they  are blocked.

I unchek the School Nites item...let it save and then Check the BLOCK ACCESS item...let it save....

Make sure you have DNS Relay enabled or the access controls tend not to work at all.... Unless the newer Firmware has changed that....

[dirkpitt]

...
Make sure you have DNS Relay enabled or the access controls tend not to work at all.... Unless the newer Firmware has changed that....

What?  Maybe this is the tidbit of information that I have been lacking to get my Access control working!!  Thanks!

[madmax44]

What?  Maybe this is the tidbit of information that I have been lacking to get my Access control working!!  Thanks!

Did changing that get your Access Control working for you?

[dirkpitt]

Did changing that get your Access Control working for you?

Finally got around to enabling the DNS Relay to see if it makes my Access Control work.  No dice. 

[Sammydad1]

did you save and re-boot the router??  Maybe delete and re-add the policy.

[dirkpitt]

Yep.  I love the save and reboot dance!

No, I haven't tried reassembling the rules.  So far, it's just one of those features that I've learned to live with.  I've already wasted way too much time trying to coax this thing to work properly.

I'll keep you posted if I get around to doing a factory reset and manually re-configuring the whole thing from scratch anytime soon.

[dirkpitt]

Finally!!! The final fix was to disable Dynamic Fragmentation in the QoS settings!!  I need the QoS for my VoIP. 

Now it's working!!  (Carefully backing away from the router so as not to upset it...) 

[dirkpitt]

Sigh... just enabled Dynamic Fragmentation because it seems that QoS doesn't work without it. 

Of course, Access Control doesn't work with it...   

[davevt31]

At one time the 655 had an issue with rules that wrapped around Midnight, I don't know if it has been fixed.  For a rule that runs from 10 PM - 6 AM you may need to create two rules, one that runs from 10 - 12 and another with the same settings that runs from 12 - 6.

[dirkpitt]

Thanks for the suggestion, but my filter is 24 hour.

Everytime I fix one issue with this router, another bug pops up.

The clock is ticking on buying a new one...

[mbresee]

I too was having issues with the access control feature then realized that after upgrading to the latest firmware my router time was reset.

I had a test schedule set up to block my wireless laptop between the hours of 7-9 pm and the policy was not working. I checked the log and noticed the time was off, so I updated the router time to my computer time and the policy started working.

Just wanted to throw that out there.

[madmax44]

HOLY ****! I finally got it working! Updated to the 1.34NA firmware and on the 3rd reset today I got it working. The only thing I did different the 3rd reset is that the FIRST thing I did right after the reset was set up the Access Control Rule before I set up my wireless network (SSID, key, etc.). Why setting up my wireless breaks Access Control I have no idea.

Carefully backing away from the router so as not to upset it...

And just to confirm.... after setting up my wireless I cannot add or change a Access Control policy but the ones I setup right after the reset still work.

From the other thread im posting in: http://forums.dlink.com/index.php?topic=1316.0