Access restriction policy

I own a e2000 router with the latest firmware. Set up access restriction policy for the mobile devices from my children. Deny policy based on Mac adress. Sometimes it works en sometimes it won' t work. It seems that my children keep using for instance whatssapp busy that the internet connections keeps open despite the policy. Does anyone know a solution for this?
kind regards,
cees

Thanks Jake,
Ik know that factory reset is possible via the webinterface. My quenstion was if it is possible to do a scheduled reboot with a option in the firmware? Indeed the time-zone is important. I checked this.
Does anybody know if access restriction policy works on a live internet connection? For example: my daughter uses her smartphone with Facebook and she uses it from 16:00 tot 17:00 hour and the policy is that at 16:30 it must be blocked? Or can the policy only work on a connection when it starts up (and then checks the time in the policy to know if a restriction is possible.
cheers

Similar Messages

WRT160N V3 router ignores MAC address Access Restrictions, Filtering policies

I have added a list of 2 MAC addresses in the Access Restrictions for the access policy #1 and enabled it with Allow policy. But one of my PC's MAC address which is not on the list of access policy #1 still can access the internet and ping websites. I tried to add a Deny policy in 2nd policy for this PC MAC address and then it can not ping websites anymore.
The problem is why my PC with a MAC address not on the list of Allow Policy #1 can access the internet? It seems the router Access Restrictions don't work well.

I've already added Deny rule (blocking all LAN IPs) to all computers accessing my network in Access Restrictions Policy #1 but I leave one PC left to access the router web configuration.
Then in Acess Restrictions Policy #2, I added an Allow rule to one of my PC's MAC addresses (and its IP too) but the PC can not access internet and ping websites. It looks like the allow rule in policy #2 doesn't overwrite the Deny rule in Policy #1.

Newbie with ? abt access restrictions

A friend gave us their old WRT120N so we now have wifi at home. I know it doesn't have parental controls per se, but can I use the access restrictions to turn off wi-fi at a certain time each night and turn it back on in the morning? With so many wifi devices in the house it is hard to control each one individually so I'd like to just turn off wifi on the router at a certain time each night. I need to still be able to use the pc which is comected to the router via port 4, but I don't want the wii. kindle, or phones or any other device to be able to use the wifi network.
We're at firmware version v1.0.07..
. I am new to all this and don't understand how most of this works, so all help is appreciated.

Well they must be all on the network if they have internet access.
What you could do is set your PC to a Static IP address:
Ex:
IP Address: 192.168.1.10
Subnet: 255.255.255.0
Gateway: 192.168.1.1
DNS: 192.168.1.1
Then create an Access Restrictions policy that uses the IP Address range of your DHCP settings.
Ex:
Restrict access for IP Address Range 192.168.1.100 to 192.168.1.150
Then when the other devices connect they will have to follow your access policy because their IP Address will be in the restricted policy IP Address range but your PC won't be because it's IP Address is out of the policy range.
Sorry this is a little complex but the Access Restrictions on this router aren't user friendly.
Please remember to Kudo those that help you.
Linksys
Communities Technical Support

Access restrictions w/ WRT54G Ver 8 (Firmware 8.0.5).......

It seems that Access Restrictions are a bit of a problem w/ the Linksys routers. Well, here's my story to go with the crowd. Hopefully, someone at Linksys / Cisco can provide a solution.
I am wanting to set up access restrictions on my Linksys WRT54G Ver. 8 (Firmware 8.0.5). Following the "instructions", I built my access restrictions as follows:
Policy 1
Enabled
Named for my PC
Edited List of PC's - inserted my NIC MAC address and saved the settings
Set to "Allow" Internet Access
Everyday
24 Hrs per day
Saved Settings
Policy 2
Enabled
Named for my daughters laptop
Edited List of PC's - inserted her Wireless NIC MAC address and saved the settings
Set to "Allow" Internet Access
Sun - Thur: 07:00 AM - 09:30 PM
Fri - Sat: 07:00 AM - 10:00 PM
Saved Settings
Policy 3
Enabled Named for my wife's desktop
Edited List of PC's - inserted her NIC MAC address and saved the settings
Set to "Allow" Internet Access
Sun - Sat: 06:00 AM - 11:00 PM
Saved Settings
....then, I reset the router. Once up, I tried access from each PC...nothing. Couldn't get out.
Thus, I went back into the Linksys set up, disabled the access restrictions. Viola ! I'm back on-line with all three PC's.
Checked around the forum and found that some people had built a primary policy that included all of their PC MAC's or IP addresses and was "Enabled" and set to "Deny" Internet access 24/7. From there, they built out their access restrictions and, supposedly, they worked.
I tried that as well...deleted all the access restrictions. Reset the router and went through the entire router setup to be on the safe side. Built the primary "Deny" access restriction then my other three PC restrictions. And....it still didn't work.
Thus, I would really like to get this working so I can limit my daughters access. It's interfering with her school work so I want to lock her down a little bit. Friends are important to her but I've stressed that her education is even more important.
Thus, if Linksys themselves or someone on the forums can provide an answer, excellent ! If not, I'll look into another router that can do the job. I'd rather not do that, but if the Linksys won't perform this function, I'll have to. Thanks in advance for any feedback.

Thanks for the reply. I deleted all profiles and built just the two specific for my daughters laptop and one for my wife's PC. My wife's PC is running XP SP3. It follows the access restriction policy with no problems. My daughters laptop is running Vista Home Premium. With the policies active, her connectivity was sporadic for about an hour before it just finally shut off her connectivity completely...well before the policy was supposed to.
Thus, I'm now thinking that thismay be a Vista problem to an extent as well(Gee....who would have thought that !?!?!?!?).
I disabled the IP 6 protocol just as a precaution. Still no access. And when I disable the policies on the Linksys, she's back in service.
Any further suggestions are appreciated.

WRT54G v6 Access Restrictions killing router connection

I've posted this question elsewhere, but an answer never came up, so I'm hoping to find a solution here
I have a number of sites I'm looking to block on my home network. I set four access restriction policies (since you're limited on how many each policy can block), and it worked just fine. The sites were blocked and everything went well for about an hour (give or take, I can't recall). Then, my internet connection became erratic and started continually dropping.
The problem was that it wasn't my actual internet connection, but the router doing what appeared to be like a power-off refresh - the Power light would start blinking rapidly, and then it would either eventually reconnect on its own, or I'd have to reset the router. No matter what, though, after enabling the access restrictions, I couldn't maintain a stable connection for very long. I know that these restrictions are the issue, because if I turned them off, it was fine.. and if I turn them back on, it acts up again. I downloaded the latest firmware, but that did not help.
The router didn't feel exceptionally hot (as I thought that might've been it), but the system allows for 10 policies to be enabled, so I don't think 4 should kill the whole system. I didn't see any type of other options in the access restriction policy panel that might be causing some type of internet connection interference, but I could be wrong. I'd really love to have these blocks in place, but I'd also love to be able to still access the internet at the same time
Any help or passed-on knowledge of what's going on would be extremely appreciated

It seems defective. But you can try reflashing the firmware and then holding the reset button for 30seconds after that. If that doesn't work then do a 30-30-30 reset. You might just have to use Open Dns if those suggestions don't fix the issue.
I don't work for Cisco. I'm just here to help.

"Access Restrictions" change to "Access Policy"

can someone tell me what happen to my router linksys e1200, after i update the firmware to the latest version "Access Restrictions" is change to "Access Policy". how can i revert it back to "Access Restrictions" do i need to downgrade the firmware?
Thanks!

You updated it to the latest firmware. That’s how it works with the updated firmware. Is there any reason why you upgrade your router? It’s only recommended to update the router if needed if not then its not advisable to do so. Downgrading it to the old firmware version may have a chance to brick your router.

Setup more than one policy in one day using Access Restriction

Anyone can tell me how to set up two policys in one day using Access Restriction ?
For example:
For Weekdays, before 6pm, no restriction to use internet. after 6pm, internet ok, but certain web site or ports need to be blocked.
I can set up policy for after 6pm but then before 6pm, the router consider no-internet access period.
Any advise ?

what you just need to do is to set the policy to allow from 6PM upto the time you wanted your router to give internet access... and just set the status to enable.. type in the LAN mac adress of your router in the edit PC list, then save the settings
"a helping hand in a community makes the world a universe"

Access Restriction - Internet Connection Policy (between two times)

I want to say something about the Access Restriction.
I set the policy for allow internet connection for one of my LAN PC's. For example, I set the policy to ALLOW internet connection EVERY DAY from 8:00PM to 10:00PM. Starting with 10M internet connection stops. BUT, after a few minutes I do a power circle (turn OFF and turn ON the router) and I have internet connection again. For me, allowing internet connection from 8:00 PM to 10:00 PM means to have internet connection ONLY BETWEEN THIS HOURS, not before and not after.
In my opinion, this is the same situation with two DENY policies for internet connection, one from 12:00 AM to 8:00 PM and other from 10:00 PM to 11:55 PM (for the same PC, of course).
Why POWER CIRCLE broken this policies ?
ps - sorry for my English.

@sunwatcher,
If I set a policy for my little boy PCs ... for allowing internet connection from 4:00PM to 6:00PM (for example) ... after 6:00 PM internet connection stops and he turn OFF and turn ON the router (power circle) and after that he have internet connection, from then for a long time ...
I am from Romania, and I set time zone on GMT +2 (Bucharest time zone)
I insist with this problem because I want for him to use internet only between two times. Outside this time frame I want him to do their homework.

WRT54G2 and WRT54G locks-up (freezes) when blocking web sites using Access Restrictions

I am convinced that a few Linksys routers such as WRT54G2 and WRT54G have a major issue when blocking web sites using Access Restrictions (Internet Access Policy). After a few hours of internet access by 15 wired users the Linksys locks-up and blocks all internet web access. The only solution is to restart the power on the router.
We are currently using a Linksys WRT54G2 v1 (firmware 1.0.04). We upgraded the WRT54G2 v1 firmware to the latest 1.0.04 version which did not resolve the issue. NOTE: We were previosuly using a a Linksys WRT54G v1.1 (firmware 4.21.1) until the power supply blew a week after we started blocking web sites using Access Restrictions (Internet Access Policy).
Basically, we have a T1 internet connection and a hub connected to the Linksys router. We are trying to block several web sites such as facebook, myspace, etc. for 15 wired users. We do not use wireless connections.
This is the 2nd time it happened with 2 different models.
Please help ASAP.
Thank you,
Lance
(Mod note: Edited post. Some parts off topic.. Thanks!)

Also, you have already upgrade/re-flash the firmware of your Linksys Router you need to reset and reconfigure your router from scratch. Press and hold the reset button for 30 seconds...Release the reset button...Unplug the power cable from your router, wait for 30 seconds and re-connect the power cable...Now re-configure your router...

How to configure CLI/DNIS based access restriction in 5.3 ?

Hi,
does anybody have an idea how the setting
define CLI/DNIS-based access restrictions which is defined in ACS v. 4.2
can be configured in acs 5.3 ?
in v. 4 for every user in a group with 40 members a different CLI is defined for each. How can I configure that in version 5.3 ?
any help as always much appreciated!

The equivalebt to NAR functionality can be found at:
Policy Elements > Session Conditions > Network Conditions > End Station Filters
Can then define an object with a set of CLI values
These objects can then be used in policy conditions. So can create a condition with a set of CLI values and then match in authorization policy for values that are included in this set and set authorizations accoridngly
Not sure if this is your use case but hopefully may be a start

Windows Media Center - wont launch...due to Software Restriction Policy???

Current system:
Windows Vista x64 Ultimate RETAIL installed onto clean system.
UAC disabled
Using full administrator account w/ no restrictions
Problem:
Anytime I attempt to launch Windows Media Center or Media Center Extender I receive the following popup error and the program does not attempt to to even start:
Error:
[Windows Media Center
"Windows cannot open this program because it has been prevented by a software restriction policy. For more information contact your system administrator."
Summary:
When I initialy installed the OS, this problem did not exist. I was able to launch WMC just fine. Only after a couple month of reinstalling necessary base applications do I now get this error. My family cannot even use it as an extender for the XBOX360 anymore.
From what i can tell there are a lot of people with this issue and NO SOLUTION from MS as yet. I did see in one post that someone else had this error and was able to correct it by setting WMC as the default application in "Default Programs --> Set Program Access and Computer Defaults" This did not work for me at all. At this point I am at a complete loss. Any insight would be appreciated.
-J

For Windows 8 here was the solution that FIXED it for us:
http://windows.microsoft.com/en-us/windows-8/set-program-access-computer-defaults
To start, open the Set Program access and computer defaults page:
Swipe in from the right edge of the screen, and then tap Search.
(If you're using a mouse, point to the upper-right corner of the screen, move the mouse pointer down, and then clickSearch.)
Enter control panel in the search box, and then tap or click Control
Panel.
Under View by:, select Large
Icons, and then tap or click Default Programs.
Tap or click Set program access and computer defaults.
Set program access
If you want to make a program inaccessible without uninstalling it, you can set it so it doesn't appear where programs are typically listed.
On the Set Program access and computer defaults page, under Choose
a configuration, tap or click Custom.
Clear the Enable access to this program check box next to the programs you want to make inaccessible,
and then tap or click OK.
Shawn Lafferty

WRT160Nv3 problem with blocking traffic using Access Restrictions

Hi.
I want something quite simple. Block Youtube. I go into "Access Restrictions", choose a name for policy 1, enable it, choose the pc from the pc list, but then...
if a click Deny, all other options will be disabled (greyed out, can't click nor write on them).
Therefore, I can't put the urls I want (youtube).
I tried writing the url with "allow" and then change it to "deny" but it will block ALL traffic.
No good.
So, how do I make a new policy just to block this one URL?
Is it normal that when I click and choose "Deny" everything gets disabled afterwards?
Thanks in advance.
Regards,
Leo
Solved!
Go to Solution.

for internet access policy DENY means to restrict internet access during specified days and hours. this will block ALL internet traffic for the said schedule. website blocking by URL, blocking by means of keyword and blocking applications would then be NOT AVAILABLE as the computers would not have internet access to begin with if you have such a policy disabled.
for your case, you may want to try to set restriction to ALLOW internet access then specify youtube.com under Website Blocking by URL. this would allow computers to have access to the internet all the time (if you have the schedule set to EVERYDAY) or during specific days and hours but NOT have access to youtube.

Access Restrictions - Blocked Applications does not save

Under the Access Restrictions section it is possible to Block Applications.
I enter a name for the application, the port range (from and to) and whether it is TCP, UDP or both. I then hit ADD which adds the application to the list of Blocked Applications in the box above. I then scroll down thru that box to find the App and [>>] add it to the Blocked List. I then hit SAVE SETTINGS
Upon returning to the policy and the Blocked Apps list the record I just created is nowhere to be found. Not in the Blocked List or under Applications.
What gives ???

Wireless-N Gigabit Router
Model: WRT310N
Firmware Version: v1.0.06
All PCs run VISTA
I don't see how a HARD RESET and POWER RECYCLE creates a fix for this. All that does is reboot the existing firmware and causes me to have to reenter all the router and security settings. The documentation for the lastest firmware (version Ver.1.0.9 build 4 12/11/2009) and the previous upgrade (1.0.07 build 14) does not include references to a fix for this problem. Has this been identified before and what firmware version is the fix included in ?
I have held off performing the 1.0.9 firmware upgrade as I have no confidence that this will fix this problem.

Software restriction policy not working correctly

Ladies and Gents,
we run a windows server 2008r2 environment.
we have a software restriction policy in place for quite some time now and it's been working fine until about a week ago. here's how we have it setup:
Enforce = All Software files except libraries (such as DLLs). + All Users.
Security Level = Disallowed
Designated File Types=
Defaults
Additional Rules:
C:\* = Disallow.
The rest of the rules are paths for files and folders that we have set as Unrestricted.
Since about a week ago, our security team discovered that they can open any allowed file type such as text file, and then go to file and click on open. In the open dialog box they would type
in C:\Windows\System32\drivers\etc\hosts and then click and open it would actually open the hosts file.
I even tried adding a path rule for C:\Windows\System32\drivers\etc\hosts with Disallow, and it’s still allows opening this file for non admins.
Any ideas as to why is software restriction policy not blocking access to any files or folders that are not explicitly allowed via a path rule?
Any help or comments are much appreciated.
Mohsen Almassud

You are moving in a wrong way. Software Restriction Policies are designed to prevent users to launch executables/applications. It cannot prevent you from opening TXT file, because it is not an executable. In order to prevent TXT files, you have to block
notepad.exe executable. It is very different technology.
You must move to a permission configuration. If there are folders users should not access, remove them from respective folder's ACL. You must be careful with restricting user access to system folders (%systemroot%), because you may block critical applications
and eventually no one will be able to log on to server, because logon-dependant paths are not accessible due to restrictions in the ACL.
My weblog: http://en-us.sysadmins.lv
PowerShell PKI Module: http://pspki.codeplex.com
Check out new:
PowerShell FCIV tool.

Cisco ISE Machine Access Restrictions MAR

I want to test out MAR. I notice there is a tick box on the ISE for MAR under: Identity Management --> External Identity Sources --> Active Directory --> Advanced Settings --> [tick] Enable Machine Access Restrictions
but also there is this condition that is to be used in the AuthZ Policy
Network Access:WasMachineAuthenticated
So...
What does the tick box option do?
Are they related or refer to different things?
Are both needed to get a MAR AuthZ to work?
Any of clarifying or beneficial info?
thanks

Hi,
Your are correct you will have to create an authorization condition that checks if the machine authenticated successfully.
So...
What does the tick box option do?
When you enable MAR globally it lets the ISE know to build a cache for endpoints that successfully perform machine authentication.
Are they related or refer to different things?
They work hand in hand.
Are both needed to get a MAR AuthZ to work?
Yes, you will have to create another authorization policy to allow domain computers to connect.
Any of clarifying or beneficial info?
When MAR is enabled, you will have to enable machine and user authentication to your laptop, after MAR succeeds ISE builds an entry in its database mapping the endpoint (mac address) to a successful machine authentication, after when a user authenticates not only do they have to provide the correct credentials but the mac address they are authenticating through will have an entry in the "MAR cache", keep in mind that some supplicants only perform machine authentication when logging on and off, and on boot up. If you want to use MAR i suggest using the Anyconnect NAM client, there is a new feature in ISE 1.1.1 and the latest client that allows you to perform eap chaining.
Thanks,
Tarik Admani
*Please rate helpful posts*

Access restriction policy

Similar Messages

Maybe you are looking for