Hi,

We have a Vigor 2862 router for our home network and I am trying to block devices from accessing both the local LAN and the internet between specific hours.

I would like to know how to do this for any device, but for now, I am trying to get this to work for one specific device.

The Device (Squeezebox Radio) accesses the network by Wifi (UniFi 6 Lite access point), but could alternatively be by ethernet. The device connects to a Music Server (LMS) at a static IP address, the device itself connects by DHCP with IP address reserved by MAC address using Windows Server 2019.

I have setup the router as below; please let me know if I have missed something, or if what I want to do is not possible.

Settings:

- Object Setting > IP Object > [settings on next index profile number] >
Name: Kids Squeezebox
Interface: Any
Address Type: Mac Address
Mac Address: [entered mac address here]
Start IP Address: [entered reserved IP address here, also tried lower number]
End IP Address: 0.0.0.0, greyed out
Subnet Mask: 255.255.255.254 / 31, greyed out
Invert Selection: unticked, greyed out

- Object Setting > IP Group > [settings on next index profile number] >
Name: Stop Network
Interface: Any
Selected IP Objects: added 2-Kids Squeezebox as above

- Applications > Schedule > [settings on next index profile number] >
Enable Schedule Setup: ticked
Comment: Evenings
Start Date: today's date or earlier
Start Time: 21:0
Duration Time: 10:0
End Time: 07:00, greyed out (over night)
Action: Force Down (also tried Force UP)
How Often: Weekdays, ticked every day

- Firewall > Filter Setup > [settings on next index profile number] >
Comments: Evening
[settings on next index profile number] >
Enable: ticked
Comments: LAN/WAN Evening
Schedule Profile: 3-Evenings, None, None, None
Clear sessions when schedule is ON: ticked
Direction: LAN/DMZ/RT/VPN -> LAN/DMZ/RT/VPN
Source IP/Country: tried Any and the device's reserved IP
Destination IP/Country: Any
Service Type: Any
Fragments: Don't Care
Filter: Block Immediately
Syslog: not ticked
rest of page is greyed out
Advanced Setting > left as defaults

Thanks!

Maybe me not understanding the setup but shouldn't "Direction: LAN/DMZ/RT/VPN -> LAN/DMZ/RT/VPN" be "Direction: LAN/DMZ/RT/VPN -> WAN" ?

Piste Basher wrote:
Maybe me not understanding the setup but shouldn't "Direction: LAN/DMZ/RT/VPN -> LAN/DMZ/RT/VPN" be "Direction: LAN/DMZ/RT/VPN -> WAN" ?

I would like to block access to our media server on the LAN.

I've done a bit more research and to do what I need, it unfortunately looks like I'll need to chop up my home network in subnets with VLANs...