From MikroTik Wiki
Jump to navigation Jump to search

Applies to RouterOS: 6.41


"Kid control" is a parental control feature to limit internet connectivity for kids.

Kid Control

Sub-menu: /ip kid-control

This menu contains information about configurable parameters.

Property Description
name (string) Name of the Kids profile
mon,tue,wed,thu,fri,sat,sun (time) Each day of week. Time of day is selected, when internet access should be allowed
copy-from (string) Copy parameters from different Kids profile
disabled (yes | no) Whether restrictions is enabled
rate-limit (string) Limit allowed amount of traffic
time-rate-limited (time) Time how long to limit traffic


Sub-menu: /ip kid-control device

This sub-menu contains information if there is multiple connected devices to internet (phone, tablet, gaming console, tv etc.). Device is identified by MAC address that is retrieved from the ARP table. The appropriate IP address is taken from there. It is possible to assign whole subnet to kids devices using netmask.

Property Description
mac-address (string) Devices mac-address
user (string) To which profile to add the device


[admin@MikroTik] > /ip kid-control add name=kid1 sun=20:00:00-22:00:00 mon=16:00:00-21:00:00
[admin@MikroTik] > /ip kid-control device add name=Limit1 user=kid1 mac-address=FF:FF:FF:ED:83:63

Internet access limitation is implemented by adding dynamic firewall filter rules or simple queue rules. Here are example firewall filter rules:

[admin@MikroTik] > /ip firewall filter print

1  D ;;; Limit1, kid-control
      chain=forward action=reject src-address= 

2  D ;;; Limit1, kid-control
      chain=forward action=reject dst-address=