Q on ASUSWRT 5.0, AX86U Pro app vs GUI settings for access control

[routerq]

RT-AX86U Pro, Firmware Version:3.0.0.6.102_34336

I installed the Asus Android app and I can see many per device settings like block internet access etc..

I cant find them on the Web GUI, i think I remember that on my RT-AC86U with Merlin FW, i could do that in the network map client list.

Is there a way to do it on the official 3.0.0.6 FW?

 

[bennor]

Did you check under Parental Controls > Time Scheduling? That's typically where the WAN block rule is created for LAN clients when using the Network Map method of blocking Internet Access. For Guest Network Pro clients see the settings under Guest Network Pro. One may not see a block internet access depending on which GNP preconfigured entry they select.

 

[visortgw]

Try this: Network Map tab >> click on Clients button >> select device under Client status list (right side of window).

 

[routerq]

Try this: Network Map tab >> click on Clients button >> select device under Client status list (right side of window).

perfect this worked...

I was trying by clicking on the "View List" button ... never thought of clicking on the client button....

 

[routerq]

I just noticed today that:

1) I can't block internet access for devices that are on the Guest SDN by clicking on the Network Map>Clients>Client List > Client button.

2) Wireless MAC filter does not work on devices that are on the Guest SDN

I have a devices that I cant find a way to disconnect from my wifi or factory reset it and need to block its internet access. For now I have used Parental Controls > Time Blocking set to block it. But I am not sure if that is also functioning.

Looking for inputs / options.

 

[bennor]

@routerq make sure to use the stock firmware's Feedback page (Administration > Feedback) to send feedback to Asus on it if you haven't done so already. Being unable to block internet access to Guest Network Pro clients appears to be just one more quirk with the feature among a number of others.

Edit to add: I guess one option is to use IPTables and create a new entry via SSH to block the specific Guest Network Pro client. But that method likely won't survive a router reboot or firewall restart.

 

[routerq]

@routerq make sure to use the stock firmware's Feedback page (Administration > Feedback) to send feedback to Asus on it if you haven't done so already. Being unable to block internet access to Guest Network Pro clients appears to be just one more quirk with the feature among a number of others.

Edit to add: I guess one option is to use IPTables and create a new entry via SSH to block the specific Guest Network Pro client. But that method likely won't survive a router reboot or firewall restart.

Thanks , I will report to Asus.

1Q) Since this is an IOT device, and I have blocked access using Parental Control feature. How do I check that no traffic is going out form it OR reaching it?

 

[bennor]

1Q) Since this is an IOT device, and I have blocked access using Parental Control feature. How do I check that no traffic is going out form it OR reaching it?

Connect a mobile device to the Guest Network Pro and test.

Blocking using Parental Control didn't seem to work for me in a quick and dirty test on a RT-AX86U Pro running 3.0.0.6.102_34336.