logo elektroda
logo elektroda
X
logo elektroda

Parental control, time restriction for multiple devices and users

SK-ANT 9756 5
ADVERTISEMENT
Treść została przetłumaczona polish » english Zobacz oryginalną wersję tematu
  • #1 17139970
    SK-ANT
    Level 10  
    Hello all,
    Parental control and limiting the Internet access time have been rolled out more than once in this forum. However, time goes by and there are more and more issues related to it.

    In general, I would like to limit the Internet access time for individual network users, regardless of the device they use: e.g. smartphone, tablet, laptop, playstation, xbox, desktop computer, TV, etc. Some devices connected to the Internet should not be restricted, and some restrictions should work depending on the user. Each user can use many devices, and a given device can be used by many users.

    At home, I have a LAN network and a Wifi access point that are connected to a Linksys 24-port switch, and this one to an LTE router (Huawei B618). Most stationary devices are connected via LAN, tablets and smartphones use WiFi. I played with blocking access via MAC addresses on the router, but in practice it did not work.

    I made up my mind (as it used to be in some hotels) that you will have to log into the network and only then get temporary Internet access. Each user will have their login and a specified maximum amount of Internet access time during one day - regardless of the number of devices they use and regardless of the time of day. It would be good if you could define the amount of time available depending on the day of the week (e.g. Monday-Friday 2 hours, Saturday-Sunday 4 hours).
    The functionality of determining access hours, which is available on many devices, is a secondary issue.
    Due to the multitude of devices and the cleverness of kids, I don't want to install anything on individual devices. Independent access to the Internet from a smartphone is limited by the amount of data that kids cannot change and is not a major problem here.

    Initially, I found the Uniquiti EdgeRouter X router, which has the ability to upload additional "modules" with the software, and which I would like to plug in between the LTE router and my switch.
    When browsing the forum topics, most of them were about content restriction or access times. I would like to set a daily time limit during which a given user has access to the Internet. Stationary games for my kids are practically a thing of the past.

    Could I ask for your ideas such as the easiest way to implement these limits?
    Maybe someone has more experience with the Uniquiti EdgeRouter X and could confirm that something like this can be done on this device, or possibly suggest something else.

    Thank you for your help
    Slawek
  • ADVERTISEMENT
  • #2 17143812
    IC_Current
    Network and Internet specialist
    What you dealt with in hotels is called Hotspot (login via the website). Equipment and guides - you'll find thousands.
    A more advanced solution that also supports wired networks is "called" 802.1X. You need a RADIUS server where you add users and set permissions. The server (FreeRadius) can be run on some minicomputer or router with OpenWRT. The setup is incredibly difficult for a beginner.

    Other solutions: https://www.elektroda.pl/rtvforum/topic3446858.html

    My recommended:
    Instead of blocking the link, teach your kids to use the web. Today the child will not use the Internet because he cannot, he will grow up and outsmart you, he will watch porn, etc., and you will live in blissful ignorance. The same for other things. Teach children to manage their time, offer other entertainment in return (and punishment too - not severe, but unavoidable). I think it will be a better solution in the long run.
    Helpful post? Buy me a coffee.
  • ADVERTISEMENT
  • #3 17144208
    SK-ANT
    Level 10  
    @IC_Current, thanks for the tips. The indicated topic somehow escaped me. Some FRITZ! Box routers actually have parental controls in terms of the amount of time, but there have been opinions here in the forum that it's fairly easy to get around this. Their available instructions are quite perfunctory and do not describe details, so if someone had such a router and configured these settings, please kindly share your practical comments ...

    What I have encountered in some hotels was not only about WiFi, but also for cable connections - especially in larger hotels that have been offering Internet access services to guests for many, many years.

    In the meantime, I found a DrayTek Vigor 2952 router (and several other higher models) that (according to the manual) have such functions built in: defining local users, "landing page" with the possibility of logging in and blocking access to the Internet after using a specific time limit, resetting limit at a certain time, notification, logs, etc. Unfortunately, the disadvantage of this router is the price ... 1900 PLN
    How to verify if they have a cheaper model with this functionality, I will write.
    Of course, it also has the ability to connect to RADIUS and Local 802.1X services.
    If anyone knows other routers offering a similar solution like this DrayTek, but at a better price, please give me a hint.

    As for teaching children to use the Internet (and its resources), we must be aware that the influence of the environment is very large and often exceeds the influence of parents many times. This cannot be neglected, but unfortunately (in many cases) it is not enough. This solution is to help in just such learning.
  • ADVERTISEMENT
  • #4 17144907
    IC_Current
    Network and Internet specialist
    Draytek - high price, but good support from the manufacturer and the Polish distributor during the purchase and subsequent configuration. Of course, before any purchase, call the distributor directly and ask for all the details.

    Open WRT. For PLN 300 you have a great machine, but you have to spend a weekend or three on configuration. Here you have info on what to expect: https://eko.one.pl/?p=openwrt-freeradius2
    With Radius, there is also the issue of your switch and Access Points. Must support the "Sesion-Time-Out" attribute

    The solution is also to buy UTM, only professional ones cost much more than Draytek. Unfortunately, I did not use the cheap ones, but you would probably find something.
    Helpful post? Buy me a coffee.
  • ADVERTISEMENT
  • #5 17934378
    bigS
    Level 11  
    Hello,

    If you are looking for a price / performance compromise, only Mikrotik remains. Very large configuration options, unfortunately not easy configuration.
    There is a lot of material on the web, but configuration can be a problem for people who do not have much to do with the hardware (it is not about ordinary computer operation, but network configuration and management).
    I did the hotspot configuration with the functions you describe and everything works fine.

    best regards

    bigS
  • #6 17934556
    IC_Current
    Network and Internet specialist
    @bigS
    Have you tried to use their user manager as a radius for other devices and implement full 802.1x? The only thing that works is just their radio, the whole wired part lies and squeals. Only this squeal is not heard at first - you have to get closer to the bottom.
    Helpful post? Buy me a coffee.
ADVERTISEMENT