How to allow IP list to access internet

Hi,

I use clienteles users in groups, without deleting any deltails you just change the clinelyess entry to inactive and no internet access is the result.

Ian

Thanks for your reply although I do not understand what you said. But I will try to search it up.

Thanks for your reply although I do not understand what you said. But I will try to search it up.

I will expand. I assign each device a static IP address using its name, then create a clientless user for each device and add them to groups like kids, IoT, VoIP, mobiles, Parent etc.

You can change the status of a clientless user which disables the devices internet access. Also clientless users groups allow you to create specific firewall rules for device (users) access to application and web sites.

Ian

Hi, I can issue static IP based on MAC for most devices but my kids mobile phones and devices can randomise MAC addresses. My thinking is to always allow full access to selected static IPs/MACs and to restrict other IPs. Is that possible?  

Hi,

disable the random mac generation function when at home at least. The kids will bypass the firewall anyway regardless of security you implement. They will setup hotspots to bpass your firewall settings.

Ian

The good thing about my location (new housing estate) is there is no reliable mobile coverage and my fibre broadband is the only way to get fast internet so no hotspotting opportunities. I still do not know how to overcome the ramdom MAC issue except to create a rule to allow unrestricted internet access for static IPs (in range 192.168.1.10 to 192.168.1.100) and restrict any dynamic IPs above 192.168.1.101. Is that possible?   

Hi,

yes, it is possible, you create a network of the range you wan to allow and use that in the firewall rule. Though your plan to block an IP will fail because the device will allocate a new MAC andi get a new IP address if restarted after you block the original IP. Disable the MAC function on the phones, create cleintless users/ fixed IP based the device default MAC address and tell the kids not to change the setting because they will not get internet access if they do.

Ian