[support]

You can’t block access at the network level. You can set a strong password.

[support]

Currently, you can only turn communication on or off. There’s no fine grained control by protocol and port.

[support]

You can assign multiple MAC addresses to one computer (i.e., map multiple MAC addresses to one name).

For example, the computer may have a WiFi adapter and an Ethernet adapter. You can map both to the same name and same IP address. As a result, no matter how the computer is connected, it appears as the same user in Access Control.

[support]

You don’t need to keep static lease out of the range. In fact, the easiest way to assign a static IP is to set a host name from the Status page, which assigns the host’s current dynamic IP as its static IP.

[support]

Limit specifies the size of the address pool. E.g., with start=100, limit=150, maximum address will be 249.

[support]

Is all Internet traffic blocked, not just specific sites?

If you turn off Access Control for the profile, in theory the router should not interfere with the VPN on the device. Can you try switching the profile DNS to a non-filtering DNS such as Google or Cloudflare?

As a test, you may even enforce Access Control, but leave out block proxy, block VPN/TOR etc. You should have Internet access. If you don’t, you can check the Internet access logs to see what’s being blocked.

[support]

The router provides an authenticating proxy server to handle multiple users sharing one device. Once you authenticate yourself with a proxy username, then the profile for the proxy user applies, overriding the device profile.

This works well for computers where each user has a different account, and you can configure your browser to use the authenticating proxy server. Not sure what you can do on an iPad.

[support]

@WarrenHolt Mousing over the bars will display the numerical values for consumed bandwidth. You can drill down to an individual device by clicking on the device on the left side. More info is available here: https://www.pcwrt.com/2020/05/monitor-activities-on-your-home-network/.

Bandwidth Allowance on the Access Control page lets you put a cap on the maximum speed for a profile. It’s not for total bandwidth consumption.

[support]

@knoxploration You can switch the log to raw mode, which will list the domain details in reverse chronological order. You can also filter the log by selecting a profile or device from the navigation panel on the left. When you select a device, only logs for that particular device will be displayed.

[support]

Looks like you are not familiar with the Linux shell. It is advised that you keep the default settings. But if you still want to do it, try:

echo net.ipv4.udp_mem=11850 15801 23700 >> /etc/sysctl.conf

[support]

1. Copy the OpenWrt image file to /tmp/
2. SSH into the router. Assuming that your OpenWrt image file is /tmp/firmware.bin, enter sysupgrade -F /tmp/firmware.bin

[support]

You can configure up to 4 WiFi networks per band.

[support]

You can add this line to /etc/sysctl.conf to increase the number:

net.ipv4.udp_mem=11850 15801 23700

[support]

EAP is supported. That’s what the username and password fields are for. The PEM/DER requirement is for server authentication. The VPN provider should provide the certificate file. For example, you can search for “protonvpn ikev2 certificate” to get the DER file for ProtonVPN. Other VPNs may use a trusted CA to sign their server certificate. You’ll need to find out what it is and upload that.

[support]

@Email4him This item was moved down the priority list because most people are using a NAS for this purpose. NAS is faster, more secure and has more features.

[Author]

Posts