[support]

@mizarcs Please check that you disabled the options “Block literal IP addresses” and “Block proxy, VPN, TOR” for the profile that the phone belongs to.

[support]

In theory turning parental control off on a profile should behave the same as when parental control is completely off on the router (for devices in the profile). You can try a simple test scenario first:
1. Enable parental control for router.
2. Delete all profiles except Default (which cannot be deleted).
3. Disable parental control for the Default profile.
4. Select System Default for DNS Servers.
5. Save the changes.
6. Test with the Nintendo 2DS and see if the problem persists.

[support]

@Max You can do a test. Make a backup of your current configuration if you haven’t already.

Make sure parental control is enabled. Then unplug the power. Power up the router again. Login to check the status of parental control. Is there any change?

If parental control is disabled after rebooting, reset the router. Then do the initial setup. Then restore your backup. After restoration, repeat the test. Configuration should not change after rebooting.

BTW, what is the firmware version?

[support]

For parental controls to work, the device must use the router’s DNS service. When DNS requests go through the router, the router forces the controlled device to use the DNS services set up in the router. But for devices that are authenticated by your DC, you must give the DC the first chance for DNS resolution, because the router doesn’t have any knowledge of the domain configuration.

If you configure your browser to use the authenticating proxy, then all traffic initiated from the browser will use the DNS service provided by the proxy. This may be different from the DNS service used by the system, i.e., when you authenticate at login.

[support]

When a device connects to the router, DNS setting is pushed out to it. The router can push its own IP address, or that of the DC. It can’t send one for some devices, and the other for other devices.

[support]

That doesn’t work. You still want the devices under parental control to use the DNS provided by the router.

[support]

Try creating a new calendar with connectivitycheck.gstatic.com listed with unlimited time, i.e., full day selected.

[support]

For the machines that need domain authentication, you can try to override the DNS server address.

This is the procedure for Windows 7:
1. Go to Network and Sharing Center
2. Click the Change Adapter Settings link
3. Find the Wireless or Ethernet adapter, right click, then select Properties
4. Highlight TCP/IPv4, then click Properties
5. In the Internet Protocol Version 4 (TCP/IPv4) Properties dialog, check “Use the following DNS server addresses”.
6. Enter the IP address of the DC in the Preferred DNS server field.

[support]

Please take a screenshot of the Calendar page and the Status page. Send to [email protected]. Thanks!

[support]

How many devices are on your network? Are they connected by wire or WiFi? Do kids devices log on the domain?

[support]

@Dan, some of the images come from www.google.com as embedded data. Can’t stop that unless www.google.com itself is stopped.

[support]

So the problem is Internet access is not cut off at the designated time, right?

First thing to check is the currentrouter time and timezone. You can get the information from the System page.

If the time is off, you can click the sync time button to get it synced with your computer.

If no problem with time, you can try adding your device to the same profile and see if you are limited by the calendar.

[support]

Not sure I understand what you meant. Are you running a server in house and want it to be visible on the Internet?

[support]

Yes.

[support]

@Dan You might want to put gstatic.com on a calendar.

[Author]

Posts