Manual:Kid-control: Difference between revisions

From MikroTik Wiki
Jump to navigation Jump to search
mNo edit summary
(2 intermediate revisions by the same user not shown)
Line 1: Line 1:
__TOC__
{{Versions| 6.41 }}
{{Versions| 6.41 }}


{{Note|Feature is a work in progress. IPv6 support is coming soon.}}
==Summary==


"Kid control" is a parental control feature to limit internet connectivity for kids.
"Kid control" is a parental control feature to limit internet connectivity for kids.


Kid names and weekly schedule are added under "/'''ip kid-control'''". For each day of week (mon,tue,wed,thu,fri,sat,sun) time of day is selected, when internet access should be allowed.
==Kid Control==
Sometimes kids need internet to make homework. But, they will watch videos instead of learning if unlimited internet access is allowed. In this case rate-limiting internet speed could be the solution. It can be done with "rate-limit" and "time-rate-limited" attributes.
 
<p id="shbox"><b>Sub-menu:</b> <code>/ip kid-control</code>
</p>
 
 
This menu contains information about configurable parameters.
 
 
{{Mr-arg-table-h
|prop=Property
|desc=Description
}}


Kid could have multiple internet connected devices (phone, tablet, gaming console, tv etc.). All of them should be assigned to the kid under "/ip kid-control device". Device is identified by MAC address that is retrieved from the ARP table. The appropriate IP address is taken from there. It is possible to assign whole subnet to kids devices using netmask.
{{Mr-arg-ro-table
|arg=name
|type=string
|desc=Name of the Kids profile
}}


It is possible to pause internet access for kid even when schedule allows it. It is done by command
{{Mr-arg-ro-table
|arg=mon,tue,wed,thu,fri,sat,sun
|type=time
|desc=Each day of week. Time of day is selected, when internet access should be allowed
}}


  /ip kid-control pause
{{Mr-arg-ro-table
      [kid1,kid2,....] - list of kids to pause (if none selected, then pause all)
|arg=copy-from
      duration - if specified, then automatically resume internet access after specified duration
|type=string
      till - if specified, then automatically resume internet access at given time
|desc=Copy parameters from different Kids profile
}}


to resume internet access, use command
{{Mr-arg-ro-table
|arg=disabled
|type=yes {{!}} no
|desc=Whether restrictions is enabled
}}


  /ip kid-control resume
{{Mr-arg-ro-table
      [kid1,kid2,....] - list of kids to resume (if none select, then resume all)
|arg=rate-limit
|type=string
|desc=Limit allowed amount of traffic
}}
 
{{Mr-arg-ro-table-end
|arg=time-rate-limited
|type=time
|desc=Time how long to limit traffic
}}
 
==Devices==
 
<p id="shbox"><b>Sub-menu:</b> <code>/ip kid-control device</code>
</p>
 
 
This sub-menu contains information if there is multiple connected devices to internet (phone, tablet, gaming console, tv etc.). Device is identified by MAC address that is retrieved from the ARP table. The appropriate IP address is taken from there. It is possible to assign whole subnet to kids devices using netmask.
 
 
{{Mr-arg-table-h
|prop=Property
|desc=Description
}}
 
{{Mr-arg-ro-table
|arg=mac-address
|type=string
|desc=Devices mac-address
}}
 
{{Mr-arg-ro-table-end
|arg=user
|type=string
|desc=To which profile to add the device
}}
 
==Examples==
 
<pre>
[admin@MikroTik] > /ip kid-control add name=kid1 sun=20:00:00-22:00:00 mon=16:00:00-21:00:00
[admin@MikroTik] > /ip kid-control device add name=Limit1 user=kid1 mac-address=FF:FF:FF:ED:83:63
</pre>


Internet access limitation is implemented by adding dynamic firewall filter rules or simple queue rules. Here are example firewall filter rules:
Internet access limitation is implemented by adding dynamic firewall filter rules or simple queue rules. Here are example firewall filter rules:


  1  D ;;; tablet, kid-control
<pre>
    chain=forward action=reject src-address=192.168.90.0/24
[admin@MikroTik] > /ip firewall filter print
 
2  D ;;; tablet, kid-control
1 D ;;; Limit1, kid-control
    chain=forward action=reject dst-address=192.168.90.0/24
      chain=forward action=reject src-address=192.168.88.254
 
 
3 D ;;; pc, kid-control
2 D ;;; Limit1, kid-control
    chain=forward action=reject src-address=192.168.89.32
      chain=forward action=reject dst-address=192.168.88.254
 
</pre>
4 D ;;; pc, kid-control
    chain=forward action=reject dst-address=192.168.89.32


[[Category:Manual|First time]]
[[Category:Manual|First time]]
[[Category:Basic|First time]]
[[Category:Basic|First time]]

Revision as of 14:05, 23 May 2018

Version.png

Applies to RouterOS: 6.41

Summary

"Kid control" is a parental control feature to limit internet connectivity for kids.

Kid Control

Sub-menu: /ip kid-control


This menu contains information about configurable parameters.


Property Description
name (string) Name of the Kids profile
mon,tue,wed,thu,fri,sat,sun (time) Each day of week. Time of day is selected, when internet access should be allowed
copy-from (string) Copy parameters from different Kids profile
disabled (yes | no) Whether restrictions is enabled
rate-limit (string) Limit allowed amount of traffic
time-rate-limited (time) Time how long to limit traffic

Devices

Sub-menu: /ip kid-control device


This sub-menu contains information if there is multiple connected devices to internet (phone, tablet, gaming console, tv etc.). Device is identified by MAC address that is retrieved from the ARP table. The appropriate IP address is taken from there. It is possible to assign whole subnet to kids devices using netmask.


Property Description
mac-address (string) Devices mac-address
user (string) To which profile to add the device

Examples

[admin@MikroTik] > /ip kid-control add name=kid1 sun=20:00:00-22:00:00 mon=16:00:00-21:00:00
[admin@MikroTik] > /ip kid-control device add name=Limit1 user=kid1 mac-address=FF:FF:FF:ED:83:63

Internet access limitation is implemented by adding dynamic firewall filter rules or simple queue rules. Here are example firewall filter rules: 

[admin@MikroTik] > /ip firewall filter print

1  D ;;; Limit1, kid-control
      chain=forward action=reject src-address=192.168.88.254 

2  D ;;; Limit1, kid-control
      chain=forward action=reject dst-address=192.168.88.254
Retrieved from "https://wiki.mikrotik.com/index.php?title=Manual:Kid-control&oldid=31390"