IP amd Port Filtering not working on home hub 3.

[Moist_Morsel]

Hi there.

My daughter keeps getting up at 5.30 to watch youtube and I want it to stop.

I tried the virgin media connect app but it didn't work, presumably because I have split the WiFi ranges to two separate access points (5 and 2.4ghz).  Therefore I tried doing this through the router using the IP and Port filtering section within advanced controls and security.

I highlighted between 1pm and 7am on the router and selected all destination IP addresses, selected all, selected block all on specific dates and times.

The router should, for all intents and purposes, be blocking Internet traffic between these hours BUT I woke up this morning to find out my daughter had been online since 5am.  I'm really irritated with this since I keep forgetting to brick the router manually before bed 

 

As a summary, I have port triggering set up for my xbox, I still have the 2.4 and the 5ghz bands split into their separate access points, and I have named some devices so that I can identify them. Otherwise though, the settings are default.

Can anyone advise what I am doing wrong

[Client62]

Very soon you will be the one asking for the Wi-Fi password & for the office laptop to be re-enabled !

10+ years ago VM ( or any ISPs ) parental controls might have been effective against an IT novice.

Current mobiles and laptops have easy to use ways to evade
both VM's DNS content blocks and MAC address filtering.

In many cases these are enabled by default and will seamlessly reconnect leaving you chasing
your tail as the device changes identity before your eyes and enjoys unimpeded access.

May one gently suggest for parents and children to sleep better,
laptops and mobiles remain out of bedrooms after lights out.

[jpeg1]

Unfortunately there are no guaranteed technical alternatives to parenting. 

[Sephiroth · Accepted solution]

You should be able to define your daughter’s device MAC address to the restriction rule.  Or have you done this already?

[Client62]

I suspect that is what has been done, only to be side stepped by MAC Address Randomisation.

[Sephiroth]

I was going by the OP's image.

[用心棒]

@Moist_Morsel,

The suggestion of not having device in bedroom is the best solution along with education of online harms and benefits.

FWIW
The setup shown in posted image will never work because no device will be assigned an IP Address of 192.168.0.0.

One possible strategy to consider to achieve your goal would be to reserve an IP Addresses range for devices where internet access is to never be blocked and any devices with IP Addresses outside of that range will be blocked using the schedule specified. The steps required would be:

• for all devices to reserve IP Address check that MAC Address randomisation is disabled and then connect to home network
• under DHCP reserve IP Address for those device not to be affected by internet block and assign them the lowest possible IP Addresses, i.e. 192.168.0.2, 192.168.0.3, etc. Restart these devices and confirm IP Address assignments.
• under Security > IP and Port filtering create a new rule using a starting IP Address one greater than those reserved in previous step, i.e. if highest reserved was 192.168.0.10 then range would start from 192.168.0.11. For example:
  
• remaining configuration should look similar to following:
  

Be aware, a highly motivated mind will find a way around the internet block — might be technically skilled  (i.e. clone MAC Address of DHCP reserved device not currently connected to network) or brutally blunt as pinhole resetting Hub.