Scheduled Port Blocking on Home WiFi Network
Posted on 2009-04-07
With a couple kids at home I would like some control over their time online, specifically at night. I have a home network with a Netgear WPN824 and a D-Link DI-624 hardwired from the FR114P firewall/router at opposite ends of the house. I bought a Netgear WNR2000 to add upstairs near the kids' rooms and have tried to use the 'port blocking' per a schedule that would limit their access at night.
For the previous 'grown ups' routers, I have given them the same hidden SSID, channel and WEP key so the kids will only see the WNR2000 in their wireless network.
After much trial and tribulation I discovered that the port blocking could only take place when using the WAN port on the WNR instead of daisy-chaining the LAN ports as I had done with the other devices. This would call for a seperate subnet for the kids, but that actually had a couple advantages: They can't browse the 'main' network ( although I could give the explicit access to shares using an IP address, i.e. \\192.168.0.8\Music ). Secondly, I could specify OpenDNS on the kids' router to have more control over content.
So, it looks like this:
DHCP for the 192.168.0 network ( Range .10 - .30 )
both share the hidden SSID, chanel 6 and WEP keys
I connect from a LAN port on the WPN824 to the WAN port on the WNR2000.
Gateway 192.168.0.1 ( FR114P )
DHCP for the 192.168.1 network ( Range .10 - .30 )
So now I have two seperate networks - The kids can connect to the WNR2000 out to the Internet, per schedule in theory, but not browse the contents of the 192.168.0.x network.
I say 'in theory' because I have still had issues and a couple questions:
1. When I make changes to the WNR2000 block services and scheduling, should I give the unit a hard reset? Somethines it doesn't appear to 'take' the new settings right away.
2. If I am logged onto the WNR2000 and change the settings to block ALL ports at ALL times, shouldn't that immediately kick me off the Internet? It doesn't.
3. Is there a basic tool I can use to test the path through the WNR2000 when it is getting out to the Internet during the times it is explicitly told to block all ports?
I hope this is clear and that someone with experience could give some guidence in this configuration