Enforced Access Control

[Casino]

“Access Control cannot be turned off for this profile, because block literal IP addresses, block proxy is checked or there are calendars configured for the profile.”

What’s this? How can i disable the access control for my profile only? I must do it.
The unique way i found is disabling the whole access control for all users. What’s the reason of this function?

Thanks.

• This topic was modified 5 years, 9 months ago by Casino.
• This topic was modified 5 years, 9 months ago by Casino.
• This topic was modified 5 years, 9 months ago by Casino.

[support]

It means you either have calendars or rules such as block proxy etc. enabled on the profile. You need to remove the calendars and turn off those options before you can disable Access Control on the profile.

[Casino]

Why this changing? It was so simple before….

[support]

@casino It’s changed so that you can add black/white lists, turn on safe search etc. without enforcing Access Control. But you still need to enforce Access Control if you want to block proxies or add calendars.

[Casino]

Black list and safe search without the access control, great idea!

Ok, now it makes sense. At this point is so much better now, thanks!

• This reply was modified 5 years, 9 months ago by Casino.

[markpenn2020]

If you can add black and white lists, enable safe search, etc without enforcing access control, then what does enabling Enforce Access Control actually do?

[Casino]

Block Tor, Proxy, VPN, literal IP addresses and calendars.

[support]

Additionally, without “Enforce Access Control”, a user can bypass blacklisting & safe search by overriding DNS servers on the user device. With “Enforce Access Control”, DNS override is blocked.

Also, the router logs Internet activity only when “Enforce Access Control” is enabled.

[Rocket88]

OK, so readin gthis thread after starting and following threads about speed.

So, I conclude that the biggest drawback to “enforce access control” would be that it can significantly slow down internet access speeds.

Most of these threads don’s reference specific routers. I have been reading up on Enforce access control and how it can affect speed.

I would love to have a table of the pcWRT branded routers with the following (you might want to included it on the main web site sales section).

Router.
For each router; Typical speeds with no VPN (no access control); Typical speeds with no VPN (access control enabled); Typical speeds with VPN (no access control); Typical speeds with VPN (access control enabled);

I have the D2 router and 500mbps fiber. I am quite curious if I should have bought the PW-AX1800.

Thanks 🙂

Keep in mind that some of us are on a budget and consequently may be buying used routers. And while all pcWRT users have security/access concerns, sacrificing speed is a tradeoff that could affect our choice or router (and perhaps even result in buying a new one or faster model.

[l67]

I have the D2 router as well as the AX1800. I have 500 mbps fiber as well. I get around 200-250mbps wired with access control on the D2. It’s worth the drop in speed for the features you get. You will never notice this drop in download speed browsing the internet or streaming content. 200-250 mbps is more than enough to power a home. My D2 runs about 25 devices smoothly. Never had a problem. Now you can leave access control off and setup DOH to get most of the features through NEXTDNS that you would with access control. But then you have to do everything through NEXTDNS. There is no drop in speed if you go the DOH route. It is true that DOH can hide your DNS requests from your ISP. But then NEXTDNS gets your DNS requests. I prefer to just keep everything on the router.

Also, the D2 can do about 150-200mpbs through wireguard with access control on for all devices except the device that is routed through the vpn. Not much point in having all the boxes checked if your using a vpn.

I would just roll with the D2 if your on a budget as long as your ok with a speed drop when using access control. It’s a capable router.

My AX1800 has no drop in speed with access control enabled.

[l67]

I forgot to add. Get the X1800 if speed is your top concern. It’s worth every penny.

[Rocket88]

Thanks for the response. I guess the rental verizon router is pretty fast, LOL.

I am definitely not concerned about members of the family using proxies or literal IP addresses.

SO it sounds like I can live without the full access control feature. Mostly I bought the router to isolate my IOT stuff and I while I may not trust DOH providers, I definitely don’t trust Verizon with my DNS inquiries, LOL. I also like the fact most of the DOH services also offer ad blocking and some malware blocking which would be very good for other members of my family (I am with a security conscious employer so I get lots of training and an probably pretty safe myself, but the family…

Eventually I will want to get a second pcWRT router as I do want to extend more than one VLAN using a second access point. I am doing this now, but I can only extend one, which is OK, but not ideal.

There’s a PX1800 used on ebay that I may grab. Originally I was thinking I would eventually get a second D2. Good to know the PX1800 really is faster.

HOPEFULLY with enforced access control OFF the family won’t notice the speed decrease when I deploy this again. I am going to get enough flack explaining how to turn off ad blocking when something they use doesn’t work. But I suspect the lack of ads will be something they will be happy about.

Definitely looking forward to getting the IOT stuff isolated, as well as blacklisting stuff they are sending too (already blocked “myprinterison” that the Samsung is regularly phoning home to).

Thanks again for the real world report 🙂

[Author]

Posts