Help on access restrictions

Hi everyone. Thanks for reading this.
I'm using a WRT54GS wireless router.
My boss asked me to create a policy in this router in order to:
1. Block Windows Live Messenger ports in two computers. Searching some other threads I've found that I have to block several ports, but this router only allows me to block up to 2 services. Is there a way to block more than 4 services in this router?
2. Allow those two computers to access only 2 URL's and deny the access to everything else. I realized that this router denies up to 4 URL's and www.someurl.com is different than someurl.com. That means if I block: www.someurl.com the user is still able to go to that URL by typing: someurl.com. My question is: Is there a way to block more than 4 URL's? or Is there a way to only permit those 2 URL's?
If the router doesn't have those capabilities: Is there some 3party software or some tutorial or something that can help me to solve this?
I really appreciate your help as this is a critical issue to be solved in our small office.
Best Regards
Roland

your first question about the ports. Select "Add/edit service" type MSN or something and thatenter the ports that MSN uses (I forget what they are, but if you contact them I am sure they could give them to you). Your second question you may have to create multiple policies and block everything except for http and SMTP and POP3. The reason you may not want to block those other to is they are for e-mail.
Hope this helps

Similar Messages

WRT54G Access Restriction Time /Day Problems. Need Help!

Hi,
I have a WRT54G wireless router. When I set the access restriction time to DENY everyday from 11:00pm to 6:00am, it displayed that "The end time must be bigger than start time!". It is from 11 at night to 6 in the morning. How else do I set it? I even upgrade the firmware to v4.21.1 but it still does not work with that time setting. I tried to set to ALLOW everyday from 6:00am to 11:30pm and it accepted the settting but it just applied the restriction right away without waiting for the right time (after I enable it, none of the laptops can access internet even its only 9:10pm).. The time in the linksys setup page is correct as well as all my pcs. Please help! Thanks.

The Access Restrictions feature of a Linksys router allows you to limit Internet access on your network. You can deny certain computers’ Internet access or block certain applications and services.
Here is the link for setting up the Access Restrictions on a Linksys router: http://www6.nohold.net/Cisco2/ukp.aspx?vw=1&docid=20b29e54474a4a17aff594cb659747ea_4041.xml&pid=80&r...

WRT54G2 and WRT54G locks-up (freezes) when blocking web sites using Access Restrictions

I am convinced that a few Linksys routers such as WRT54G2 and WRT54G have a major issue when blocking web sites using Access Restrictions (Internet Access Policy). After a few hours of internet access by 15 wired users the Linksys locks-up and blocks all internet web access. The only solution is to restart the power on the router.
We are currently using a Linksys WRT54G2 v1 (firmware 1.0.04). We upgraded the WRT54G2 v1 firmware to the latest 1.0.04 version which did not resolve the issue. NOTE: We were previosuly using a a Linksys WRT54G v1.1 (firmware 4.21.1) until the power supply blew a week after we started blocking web sites using Access Restrictions (Internet Access Policy).
Basically, we have a T1 internet connection and a hub connected to the Linksys router. We are trying to block several web sites such as facebook, myspace, etc. for 15 wired users. We do not use wireless connections.
This is the 2nd time it happened with 2 different models.
Please help ASAP.
Thank you,
Lance
(Mod note: Edited post. Some parts off topic.. Thanks!)

Also, you have already upgrade/re-flash the firmware of your Linksys Router you need to reset and reconfigure your router from scratch. Press and hold the reset button for 30 seconds...Release the reset button...Unplug the power cable from your router, wait for 30 seconds and re-connect the power cable...Now re-configure your router...

How to configure CLI/DNIS based access restriction in 5.3 ?

Hi,
does anybody have an idea how the setting
define CLI/DNIS-based access restrictions which is defined in ACS v. 4.2
can be configured in acs 5.3 ?
in v. 4 for every user in a group with 40 members a different CLI is defined for each. How can I configure that in version 5.3 ?
any help as always much appreciated!

The equivalebt to NAR functionality can be found at:
Policy Elements > Session Conditions > Network Conditions > End Station Filters
Can then define an object with a set of CLI values
These objects can then be used in policy conditions. So can create a condition with a set of CLI values and then match in authorization policy for values that are included in this set and set authorizations accoridngly
Not sure if this is your use case but hopefully may be a start

Balance sheet - Access restrictions

Hi
Can anyone help me in restricting Balance sheet access business area wise
Regards
Malathi

You can do this using Authorisations, speak to yoru Auth team about it.
Regards,
Tony

WRTU54G-TM Slow Setup Page and HTML Error on Access Restrictions Page

I have a WRTU54G-TM Wireless Router. It has v1.00.21 firmware and I have done a reset with no solution. Everything seems to work, except the setup pages load very, very, very slow. Also in Internet explorer I get an HTML error on the access restrictions page. Resets don't help. The router did not have this issue until about a month ago that I recall. I can see on the access restrictions page the gray shading is all lined up except at the bottom on the page, like ther is some sort of issue in the html within the router.
One more problem, after I reset the router the saved config file I made would not change the default settings back, I had an older saved config file also, it would not work either.
Is this an issue with this firmware version? Any one else see this?
Message Edited by johnsonle9 on 01-24-2010 01:24 PM
Message Edited by johnsonle9 on 01-24-2010 01:24 PM

Are you getting the same problem with another computer...?
Try using different computer and check if you are getting the same problem or not...If yes then,I would suggest you to re-flash/upgrade the router's firmware,reset the router and re-configure it from scratch..Do not use the save config file.

Create access restriction in designer using script

Hello,
I am looking for a way to automate the creation of access restriction within universe.
I looked in the API universe reference and it seems that there is no entries for such an object
For information I use Business Objects XIR2 with SP3
Thanks for any help or answer

Creation/Modification of Universe Access Restrictions is not part of the Universe Designer SDK, but part of the BusinessObjects Enterprise SDK.
It requires sending requests to the CMS using the SDK to get User and UserGroup information.
For the COM-based version of the Enterprise SDK, the object is known as Overload, and described here:
[http://devlibrary.businessobjects.com/BusinessObjectsXIR2SP2/en/en/BOE_SDK/boesdk_com_doc/doc/boesdk_com_doc/CrystalEnterpriseOverloadPluginLibrary.html#1351377]
Sincerely,
Ted Ueda

Problem with access restriction

I have about 50 to 80 users under my internet connection and i used the router 2500 and make there repeater of the single connection but i want to restrict many of the user on interner and some on timely but is not possible with this version of product, what can i do house, or what software do you suggest for me to use with this to restrict the internet access on this network.
Again, i try to use switch sf100-24 becos of the numbers of the cable to use that is more than 4 as we have only 4 port on the router for ethernet but if i connect it after few second it will make all the connection saying 'unidentify network' and it will not function again what can i do to solve this problem too please!!! help me house

Hi, you might perhaps consider getting a gigabit switch in order for those devices to be able to work with access restriction.

"access restrictions" did not work sometimes when using 3-tier DeskI.

My customer found that "access restrictions" did not work sometimes when using 3-tier DeskI.
But this issue can be solved by logging on from another machine, or restarting the DeskI.
For I can reproduce this issue, so I just want to know that:
1.What is it probably related to?
2.If this issue happens again, what can I suggest my customer for tracking it?
For example, get some log files from servers etc.
Thanks!

Hi Sarah,
Also you can try the following solution.
1. Import the universe.
2. Go to manage access restrictions
3. Remove the restriction .
4. Again create the rescrition and unchecked the " limit size of result set to"
5. Now assign it to the unlimited results group ( this is the name of
the group we have given to those users who should be able to retrieve
more than X rows)
6. Now we save the universe. (Dont export the universe).
I hope this will help you.
Regards,
Sarbhjeet Kaur

Cisco ISE Machine Access Restrictions MAR

I want to test out MAR. I notice there is a tick box on the ISE for MAR under: Identity Management --> External Identity Sources --> Active Directory --> Advanced Settings --> [tick] Enable Machine Access Restrictions
but also there is this condition that is to be used in the AuthZ Policy
Network Access:WasMachineAuthenticated
So...
What does the tick box option do?
Are they related or refer to different things?
Are both needed to get a MAR AuthZ to work?
Any of clarifying or beneficial info?
thanks

Hi,
Your are correct you will have to create an authorization condition that checks if the machine authenticated successfully.
So...
What does the tick box option do?
When you enable MAR globally it lets the ISE know to build a cache for endpoints that successfully perform machine authentication.
Are they related or refer to different things?
They work hand in hand.
Are both needed to get a MAR AuthZ to work?
Yes, you will have to create another authorization policy to allow domain computers to connect.
Any of clarifying or beneficial info?
When MAR is enabled, you will have to enable machine and user authentication to your laptop, after MAR succeeds ISE builds an entry in its database mapping the endpoint (mac address) to a successful machine authentication, after when a user authenticates not only do they have to provide the correct credentials but the mac address they are authenticating through will have an entry in the "MAR cache", keep in mind that some supplicants only perform machine authentication when logging on and off, and on boot up. If you want to use MAR i suggest using the Anyconnect NAM client, there is a new feature in ISE 1.1.1 and the latest client that allows you to perform eap chaining.
Thanks,
Tarik Admani
*Please rate helpful posts*

@prompt used as part of Access Restriction

We are struggling with implementing this, and wanted to check to see if this we can accomplish this. We need to use an @prompt as part of an access restriction applied to the everyone group in order to force all users to select Group A, B or C at run time. We've added the prompt into an access restriction, but we cannot get the query to finish processing. Does anyone have a thought about this?

Tony,
If you are using BOE XI 3.x, I suggest you create a predefined filter that includes the prompt definition in the universe and set it as "Compulsory applied on universe".
Thus will prompt any user to answer to the prompt you will define in this predefined filter.
Hope this helps.
Didier

Document Universe Overloads/Access Restrictions

Is there a good way to document universe overloads/access restrictions? I can't seem to find anything. We have a ton of universe objects which are restricted for certain users/groups, and we need to re-work this list. Ideally, I'd love to have these listed out by restriction name - restricted object, or restriction name - row-level restriction.
Any help is much appreciated!

Hi Kunal,
Yep, that's exactly what I did. The query I used was:
Select SI_NAME, SI_OBJECTS
from CI_APPOBJECTS
where SI_KIND like '%OVERLOAD%' and SI_PARENT_CUID = '<universe ID>'
This worked fairly well, but it would be great if SAP would give us an ability to output these queries to Excel to make them more manageable.
Thanks!
Bill

WRT54GS Access Restriction for WiFi Connected Devices

I have the WRT54GS v4 running with the latest Firmware Version: v1.06.3 -- I am attempting to add Access Restrictions for a few MAC addresses and IP addresses (my kids iPod Touch and laptop).
I am simply wanting to deny total internet access from 9pm to 7am. I have gotten it to work but ONLY for computers that are actually plugged into the router (cat 5 internet cables). All the computers/devices that connect to the router via wifi do not seem to be restricted at all. I am thinking this is an issue with the router in that it ONLY seems to apply the Access Restriction rules to those devices that are actually directly connected by hardwire.
Has any one else noticed this issue for WiFi connected devices? Access Restrictions do not seem to apply to WiFi connected devices.
Please help -- I would hate to have to buy another router.

Are you sure you have enter the correct MAC address or IP address? Wired connections use different MAC and IP addresses then wireless connection...

Customizing blocking screen by Access Restriction of Linksys router

Hi,
I've recently deployed the Access Restriction of my linksys rounter and it works fine. When I try visiting the website which I've set to be blocked, a screen with the message "Website blocked by Linksys Firewall" is shown.
May I know how I can change this screen to another screen or change the message to another message (say something like "the website has expired") instead?
Thanks a lot for your kind help!
Best Regards,
Michael.
Message Edited by mlam on 09-20-2009 08:59 PM

That would take a change to the firmware...not possible with the stock firmware. If your router supports 3rd party firmware (don't know as you didn't provide a model) you may be able to work around it, but it would take some fairly in-depth Linux know how.....
Tomato 1.25vpn3.4 (SgtPepperKSU MOD) on a Buffalo WHR-HP-G54
D-Link DSM-320 (Wired)
Wii (Wireless) - PS3 (Wired), PSP (Wireless) - XBox360 (Wired)
SonyBDP-S360 (Wired)
Linksys NSLU2 Firmware Unslung 6.10 Beta unslung to a 2Gb thumb, w/1 Maxtor OneTouch III 200Gb
IOmega StorCenter ix2 1TB NAS
Linksys WVC54G w/FW V2.12EU
and assorted wired and wireless PCs and laptops

Setup more than one policy in one day using Access Restriction

Anyone can tell me how to set up two policys in one day using Access Restriction ?
For example:
For Weekdays, before 6pm, no restriction to use internet. after 6pm, internet ok, but certain web site or ports need to be blocked.
I can set up policy for after 6pm but then before 6pm, the router consider no-internet access period.
Any advise ?

what you just need to do is to set the policy to allow from 6PM upto the time you wanted your router to give internet access... and just set the status to enable.. type in the LAN mac adress of your router in the edit PC list, then save the settings
"a helping hand in a community makes the world a universe"

Help on access restrictions

Similar Messages

Maybe you are looking for