Manual:Kid-control: Difference between revisions
No edit summary |
mNo edit summary |
||
| Line 1: | Line 1: | ||
{{Versions| 6.41 }} | {{Versions| 6.41 }} | ||
"Kid control" is a parental control feature to limit internet connectivity for kids | {{Note|Feature is a work in progress. IPv6 support is coming soon.}} | ||
"Kid control" is a parental control feature to limit internet connectivity for kids. | |||
Kid names and weekly schedule are added under "/'''ip kid-control'''". For each day of week (mon,tue,wed,thu,fri,sat,sun) time of day is selected, when internet access should be allowed. | Kid names and weekly schedule are added under "/'''ip kid-control'''". For each day of week (mon,tue,wed,thu,fri,sat,sun) time of day is selected, when internet access should be allowed. | ||
Sometimes kids need internet to make homework. But, they will watch videos instead of learning if unlimited internet access is allowed. In this case rate-limiting internet speed could be the solution. It can be done with "rate-limit" and "time-rate-limited" attributes. | Sometimes kids need internet to make homework. But, they will watch videos instead of learning if unlimited internet access is allowed. In this case rate-limiting internet speed could be the solution. It can be done with "rate-limit" and "time-rate-limited" attributes. | ||
Kid could have multiple internet connected devices (phone, tablet, gaming console, tv etc.). All of them should be assigned to the kid under "/ip kid-control device". Device is identified by IP address. It is possible to assign whole subnet to kids devices using netmask. | Kid could have multiple internet connected devices (phone, tablet, gaming console, tv etc.). All of them should be assigned to the kid under "/ip kid-control device". Device is identified by MAC address that is retrieved from the ARP table. The appropriate IP address is taken from there. It is possible to assign whole subnet to kids devices using netmask. | ||
It is possible to pause internet access for kid even when schedule allows it. It is done by command | It is possible to pause internet access for kid even when schedule allows it. It is done by command | ||
Revision as of 10:56, 31 January 2018
Applies to RouterOS: 6.41
Note: Feature is a work in progress. IPv6 support is coming soon.
"Kid control" is a parental control feature to limit internet connectivity for kids.
Kid names and weekly schedule are added under "/ip kid-control". For each day of week (mon,tue,wed,thu,fri,sat,sun) time of day is selected, when internet access should be allowed. Sometimes kids need internet to make homework. But, they will watch videos instead of learning if unlimited internet access is allowed. In this case rate-limiting internet speed could be the solution. It can be done with "rate-limit" and "time-rate-limited" attributes.
Kid could have multiple internet connected devices (phone, tablet, gaming console, tv etc.). All of them should be assigned to the kid under "/ip kid-control device". Device is identified by MAC address that is retrieved from the ARP table. The appropriate IP address is taken from there. It is possible to assign whole subnet to kids devices using netmask.
It is possible to pause internet access for kid even when schedule allows it. It is done by command
/ip kid-control pause
[kid1,kid2,....] - list of kids to pause (if none selected, then pause all)
duration - if specified, then automatically resume internet access after specified duration
till - if specified, then automatically resume internet access at given time
to resume internet access, use command
/ip kid-control resume
[kid1,kid2,....] - list of kids to resume (if none select, then resume all)
Internet access limitation is implemented by adding dynamic firewall filter rules or simple queue rules. Here are example firewall filter rules:
1 D ;;; tablet, kid-control
chain=forward action=reject src-address=192.168.90.0/24
2 D ;;; tablet, kid-control
chain=forward action=reject dst-address=192.168.90.0/24
3 D ;;; pc, kid-control
chain=forward action=reject src-address=192.168.89.32
4 D ;;; pc, kid-control
chain=forward action=reject dst-address=192.168.89.32