• November 02, 2024, 06:36:18 AM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: Access Control - Blocking all computers instead of specified MAC addr  (Read 4966 times)

bob-sacameno

  • Level 1 Member
  • *
  • Posts: 3

I want to do what I thought would have been a simple enough task - block my kids phone/computer after certain hours. Instead of blocking the specified MAC address(es), all my computers does not have internet access. As soon as I disable the policy, internet access is on again. Here's what I did:

1) Created a schedule (10pm-8am, everyday)
2) Under "Access Control", created the following policy
      -> Specified one MAC address (kid's phone)
      -> Block all access
      -> Using schedule defined above

Firmware version: 2.00NA
H/W version: B1

Any help would be appreciated.
Logged

PacketTracer

  • Level 4 Member
  • ****
  • Posts: 441
Re: Access Control - Blocking all computers instead of specified MAC addr
« Reply #1 on: August 08, 2012, 05:41:26 AM »

Hi bob-sacameno,

from the DIR-655 emulator I draw the conclusion that after configuring your one and only policy for your kid's phone as a side effect "Access Control" is enabled at all, where it was disabled before. Hence it exactly does what you told it, namely just allowing your kid's phone to access the Internet between 8am and 10pm and blocking it between 10pm and 8am

 ... and ... (without saying so, but I guess it's true)

BLOCKING ANYTHING ELSE THAT IS NOT EXPLICITLY ALLOWED! <-- I guess default, if Access Control is active.

Hence, you should define a second policy, that explicitly allows Internet Access all the time for all other devices within your network.  Maybe this works if you select "Never" + "Block all access" + "List of MAC addresses of the non kid's devices" ...

Hope this works!
PT

Edit: According to the help given to that topic within the router:

"Note: When Access Control is disabled, every device on the LAN has unrestricted access to the Internet. However, if you enable Access Control, Internet access is restricted for those devices that have an Access Control Policy configured for them. All other devices have unrestricted access to the Internet."

Hence my theory I mentioned above should by wrong, and it should work just the way you had configured it without my proposed second policy. Sorry!
« Last Edit: August 08, 2012, 11:51:01 AM by PacketTracer »
Logged

bob-sacameno

  • Level 1 Member
  • *
  • Posts: 3
Re: Access Control - Blocking all computers instead of specified MAC addr
« Reply #2 on: August 08, 2012, 05:25:17 PM »

Thanks PT - I will try that out. It's going to me a while as including all the MAC addresses for the other devices is going to be quite a list (game consoles, desktops, laptops, phones)

Just to clarify, I actually have 2 policies including this one. The other one is a also by MAC address with "block some access"/"always" with a web filter...
Logged

bob-sacameno

  • Level 1 Member
  • *
  • Posts: 3
Re: Access Control - Blocking all computers instead of specified MAC addr
« Reply #3 on: August 09, 2012, 10:28:53 AM »

I got it to work - It turns out the one policy I already had (web filter) was messing things up. I started adding one MAC address at a time and it seems to work.

The documentation is correct in that if "Access Control" is on, those MAC address without a policy has unrestricted access.

Thanks PT for your suggestions.
Logged

FurryNutz

  • Poweruser
  •   ▲
    ▲ ▲
  • *****
  • Posts: 49923
  • D-Link Global Forum Moderator
    • Router Troubleshooting
Re: Access Control - Blocking all computers instead of specified MAC addr
« Reply #4 on: August 09, 2012, 11:11:32 AM »

Enjoy.  ;)
Logged
Cable: 1Gb/50Mb>NetGear CM1200>DIR-882>HP 24pt Gb Switch. COVR-1202/2202/3902,DIR-2660/80,3xDGL-4500s,DIR-LX1870,857,835,827,815,890L,880L,868L,836L,810L,685,657,3x655s,645,628,601,DNR-202L,DNS-345,DCS-933L,936L,960L and 8000LH.