Control bandwidth of IP range

[Indi]

Is this possible one way or another?

 

[ColinTaylor]

This question makes no sense. Are you talking about Wi-Fi, QoS, or something else? Please give an example of what you're wanting to do.

 

[Indi]

This question makes no sense. Are you talking about Wi-Fi, QoS, or something else? Please give an example of what you're wanting to do.

Limit download/upload speed or other method of control.

Parental controls and port forward rely on mac addresses.
iphones especially have randomised mac addressing.
Makes Parental Controls redundant.

If one could have Parental Controls over an ip range then one could take control back.

 

[jetpack42]

Limit download/upload speed or other method of control.

Parental controls and port forward rely on mac addresses.
iphones especially have randomised mac addressing.
Makes Parental Controls redundant.

If one could have Parental Controls over an ip range then one could take control back.

An alternative would be to outright disable the "Private Wi-Fi Address" feature on iOS/iPadOS/Mac OS. It can be turned off on a per-network basis (meaning if you turn it off while connected to your Wi-Fi, it will only be disabled for your Wi-Fi network, and it will continue to randomize its MAC address on new networks). That way, you can use the parental control feature and not have to jump through hoops to enforce rules on a range of IP addresses.

Also - if you are more comfortable with having a random MAC address, and you have iOS 18, you can set the Private Wi-Fi Address feature to "fixed" instead of "rotating". Your iPhone will still get a randomized MAC, but it will keep the same randomized MAC address while connected to your network, and, you'll also be able to use parental controls again.

(source: I unfortunately own a apple device, and https://support.apple.com/en-ca/102509)

 

[tiddlywink]

..

 

[Tech9]

Limit download/upload speed or other method of control.

This will kill the performance of your router, WAN-LAN speed limited by the CPU, NAT acceleration incompatible.

 

[Indi]

An alternative would be to outright disable the "Private Wi-Fi Address" feature on iOS/iPadOS/Mac OS. It can be turned off on a per-network basis (meaning if you turn it off while connected to your Wi-Fi, it will only be disabled for your Wi-Fi network, and it will continue to randomize its MAC address on new networks). That way, you can use the parental control feature and not have to jump through hoops to enforce rules on a range of IP addresses.

Also - if you are more comfortable with having a random MAC address, and you have iOS 18, you can set the Private Wi-Fi Address feature to "fixed" instead of "rotating". Your iPhone will still get a randomized MAC, but it will keep the same randomized MAC address while connected to your network, and, you'll also be able to use parental controls again.

(source: I unfortunately own a apple device, and https://support.apple.com/en-ca/102509)

Not an option as it relies on the iphone holder to do this.

Set vlan or guest network on a different subnet + limit bandwidth to that entire range should work.

[Wireless Router] How to set up Adaptive QoS - Bandwidth Limiter? | Official Support | ASUS Global

Again I think this method relies on mac addresses.

This will kill the performance of your router, WAN-LAN speed limited by the CPU, NAT acceleration incompatible.

So the entire router degrades because of limiting a small IP range?

 

[Tech9]

So the entire router degrades because of limiting a small IP range?

Yes, because this function needs traffic processing and the ARM CPU core can only do about 400-500Mbps. Home routers are build with power efficiency in mind and rely heavily on NAT acceleration techniques. Otherwise they'll need i3 class or better x86 processors inside.

 

[tiddlywink]

...

 

[Indi]

• c. Fill IP range in target filed. (Supports 3 format: 192.168.1.2-100 , 192.168.1.* or 192.168.1.0/24)

Sounds promising,I'll look into it,thanks.

Yes, because this function needs traffic processing and the ARM CPU core can only do about 400-500Mbps. Home routers are build with power efficiency in mind and rely heavily on NAT acceleration techniques. Otherwise they'll need i3 class or better x86 processors inside.

Dang
I have Asus AXE16000.
How does parental controls work?

I just need to somehow control the router LAN DHCP IP's.
When a device connects I then assign IP out of the DHCP range,then use parental controls.

 

[Tech9]

I just need to somehow control the router LAN DHCP IP's.
When a device connects I then assign IP out of the DHCP range,then use parental controls.

You said you want to limit download/upload speed...

You can't use the router for parental controls on mobile devices with Internet access via mobile operator and randomized MAC addresses when connected to your network. If we are talking about kids devices Android and iOS have built-in features for this.

 

[Indi]

You said you want to limit download/upload speed...

You can't use the router for parental controls on mobile devices with Internet access via mobile operator and randomized MAC addresses when connected to your network. If we are talking about kids devices Android and iOS have built-in features for this.

Exactly but they're not kids devices.
I can't control their device but I can control what IP they get.
Control of that IP/range is what's needed.

 

[Tech9]

You can apply bandwidth limiter to IP range, but it will severely impact your router's WAN-LAN throughput for the entire network for the reasons mentioned above. You can offer Guest Network 2.4GHz N-only at 20MHz wide channel and the devices connecting there will be limited to 70-90Mbps total bandwidth by the technology. Most mobile devices are 2-stream, can't jump higher than 144Mbps PHY rates.

 

[elbubi]

Sorry if dumb suggestion:

Wouldn't be easier to set a isolated wifi guest network with all parental controls enabled for that SSID and only share that password to targeted users?
Only drawback is you will need stock 3.0.0.6 asus fw until merlin's new branch get released.
Waiting for it to arrive in orden to implement that solution on my ax-6000 (actually using dns director with cleabrowsing enabled for ALL devices except adult ones).

Nevertheless, I did not understand clearly if you needed to limit bandwith or apply parental control to that iphones, thus my suggestion might me numb.

Regards

 

[Indi]

Sorry if dumb suggestion:

Wouldn't be easier to set a isolated wifi guest network with all parental controls enabled for that SSID and only share that password to targeted users?
Only drawback is you will need stock 3.0.0.6 asus fw until merlin's new branch get released.
Waiting for it to arrive in orden to implement that solution on my ax-6000 (actually using dns director with cleabrowsing enabled for ALL devices except adult ones).

Nevertheless, I did not understand clearly if you needed to limit bandwith or apply parental control to that iphones, thus my suggestion might me numb.

Regards

I want to apply parental controls to an iphone.
Limiting bandwidth to an IP range seems best/worst option.
Parental Controls only applies to mac addresses so far.