Manual:Kid-control: Difference between revisions

From MikroTik Wiki
Jump to navigation Jump to search
No edit summary
Line 51: Line 51:
|desc=How long to limit allowed amount of traffic
|desc=How long to limit allowed amount of traffic
}}
}}
Parameters <var>rate-limit</var> and <var>time-rate-limited</var> have to be configured together. Both limitations will work only when internet access for concrete profile is allowed.


==Devices==
==Devices==
Line 78: Line 81:
}}
}}


==Examples==
==Example==
 
With following example we will restrict access for Peters mobile phone:
* Disabled internet access on Monday,Tuesday,Wednesday and Friday
* Allowed internet access on:
** Thursday from 11:00-22:00
** Saturday from 18:30-21:00
** Sunday 15:00-22:00
* Limited bandwidth to 3Mbps for Peters mobile phone on Thursday from 20:45-22:00


<pre>
<pre>
[admin@MikroTik] > /ip kid-control add name=kid1 sun=20:00:00-22:00:00 mon=16:00:00-21:00:00
[admin@MikroTik] > /ip kid-control add name=Peter mon="" tue="" wed="" thu="11:00-22:00" fri="" sat="18:30-22:00" sun="15:00-21:00" rate-limit=3M time-rate-limited=4d20:45:00-4d22:00:00
[admin@MikroTik] > /ip kid-control device add name=Limit1 user=kid1 mac-address=FF:FF:FF:ED:83:63
[admin@MikroTik] > /ip kid-control device add name=Mobile-phone user=Peter mac-address=FF:FF:FF:ED:83:63
</pre>
</pre>


Internet access limitation is implemented by adding dynamic firewall filter rules or simple queue rules. Here are example firewall filter rules:
Internet access limitation is implemented by adding dynamic firewall filter rules or simple queue rules. Here are example firewall filter rules:
Line 95: Line 107:
2  D ;;; Limit1, kid-control
2  D ;;; Limit1, kid-control
       chain=forward action=reject dst-address=192.168.88.254
       chain=forward action=reject dst-address=192.168.88.254
</pre>
Dynamically created simple queue:
<pre>
[admin@MikroTik] > /queue simple print
Flags: X - disabled, I - invalid, D - dynamic
1  D ;;; Mobile-phone, kid-control
      name="queue1" target=192.168.88.254/32 parent=none packet-marks="" priority=8/8 queue=default-small/default-small limit-at=3M/3M max-limit=3M/3M burst-limit=0/0
      burst-threshold=0/0 burst-time=0s/0s bucket-size=0.1/0.1
</pre>
</pre>


[[Category:Manual|First time]]
[[Category:Manual|First time]]
[[Category:Basic|First time]]
[[Category:Basic|First time]]

Revision as of 12:03, 24 May 2018

Version.png

Applies to RouterOS: 6.41

Summary

"Kid control" is a parental control feature to limit internet connectivity for LAN devices.

Kid Control

Sub-menu: /ip kid-control


In this menu it is possible to create a profile for each Kid and restrict internet accessibility.


Property Description
name (string) Name of the Kids profile
mon,tue,wed,thu,fri,sat,sun (time) Each day of week. Time of day is selected, when internet access should be allowed
disabled (yes | no) Whether restrictions is enabled
rate-limit (string) Limit allowed amount of traffic
time-rate-limited (time) How long to limit allowed amount of traffic


Parameters rate-limit and time-rate-limited have to be configured together. Both limitations will work only when internet access for concrete profile is allowed.

Devices

Sub-menu: /ip kid-control device


This sub-menu contains information if there is multiple connected devices to internet (phone, tablet, gaming console, tv etc.). Device is identified by MAC address that is retrieved from the ARP table. The appropriate IP address is taken from there. It is possible to assign whole subnet to kids devices using netmask.


Property Description
mac-address (string) Devices mac-address
user (string) To which profile to add the device

Example

With following example we will restrict access for Peters mobile phone:

  • Disabled internet access on Monday,Tuesday,Wednesday and Friday
  • Allowed internet access on:
    • Thursday from 11:00-22:00
    • Saturday from 18:30-21:00
    • Sunday 15:00-22:00
  • Limited bandwidth to 3Mbps for Peters mobile phone on Thursday from 20:45-22:00
[admin@MikroTik] > /ip kid-control add name=Peter mon="" tue="" wed="" thu="11:00-22:00" fri="" sat="18:30-22:00" sun="15:00-21:00" rate-limit=3M time-rate-limited=4d20:45:00-4d22:00:00
[admin@MikroTik] > /ip kid-control device add name=Mobile-phone user=Peter mac-address=FF:FF:FF:ED:83:63


Internet access limitation is implemented by adding dynamic firewall filter rules or simple queue rules. Here are example firewall filter rules:

[admin@MikroTik] > /ip firewall filter print

1  D ;;; Limit1, kid-control
      chain=forward action=reject src-address=192.168.88.254 

2  D ;;; Limit1, kid-control
      chain=forward action=reject dst-address=192.168.88.254

Dynamically created simple queue:

[admin@MikroTik] > /queue simple print
Flags: X - disabled, I - invalid, D - dynamic 

 1  D ;;; Mobile-phone, kid-control
      name="queue1" target=192.168.88.254/32 parent=none packet-marks="" priority=8/8 queue=default-small/default-small limit-at=3M/3M max-limit=3M/3M burst-limit=0/0 
      burst-threshold=0/0 burst-time=0s/0s bucket-size=0.1/0.1