D-Link Forums

The Graveyard - Products No Longer Supported => Routers / COVR => DIR-865L => Topic started by: MyDIR865L on February 26, 2015, 12:58:44 PM

Title: Access control policy issue
Post by: MyDIR865L on February 26, 2015, 12:58:44 PM
Hi there,
I have a DIR-865L HW version A1, with the latest firmware 1.07.
I needed to block all internet access for some devices using their MACs on my home LAN, from 7pm to 7am Sunday to Thursday, and from 9pm to 9am Friday & Saturday. So I created 2 schedules and 2 access control policies , one for week nights and one for weekends.
The week nights one works just fine with no issues, however the weekends schedule never worked.
It's like as if it doesn't exist at all !? The machines on the weekends access control policy, can access the internet all day and night Friday and Saturday till 7pm Sunday, when the week nights schedule kicks in and blocks all access to the internet again.
If one schedule\ policy works well why can't the other one too?!
Any thoughts or suggestions on this issue are much appreciated.

Thanks
Title: Re: Access control policy issue
Post by: FurryNutz on February 26, 2015, 12:59:14 PM
Link>Welcome! (http://forums.dlink.com/index.php?topic=48135.0)


If you disable the weekday rule and leave the weekend rules going, do the weekend rules work then?

Besure to review the following:
Router Access Control, Blocking, Web Filters and Scheduling FAQ (http://forums.dlink.com/index.php?topic=56479.0)
To set up scheduling:
1. Reserve device IP addresses ON the router under Setup/Networking.
2. Set up a schedule under Tools/Schedule on the routers web page. Customize your dates and times here.
3. Use Advanced/Access Control configured and apply the customized schedule to a policy and to the PC(s) or device(s) desired to be controlled. 
4. Ensure Time is set correctly on the router. Tools/Time.

PC Web Browser Configurations
What browser are you using?
Title: Re: Access control policy issue
Post by: MyDIR865L on February 26, 2015, 02:12:01 PM
I'm located in Canada.
I did follow the proper steps to create schedules and access policies on my router.
So far I tried to use one schedule and one policy for the whole week restricting access from 7pm to 7am and that works just fine, but I would like to set a different time frame for the weekends.
I will try to enable only the weekend policy and will advise back tomorrow since it will be Friday.
Thanks for your reply.
Title: Re: Access control policy issue
Post by: FurryNutz on February 26, 2015, 02:13:09 PM
Sounds good, lets us know how the weekend rule works out for you.

Title: Re: Access control policy issue
Post by: MyDIR865L on March 02, 2015, 10:43:07 AM
Ok so the weekend access policy by it self worked. I've re added the week nights policy as well last night which was supposed to block access by 7 pm but that didn't happen..!! It seems that router only acknowledges the first enabled policy on the list and nothing else. Lets say If I have few policies listed, it only sees the first one if its enabled and doesn't detect anything underneath it whether enabled or disabled..?! So If I want a specific access policy to be enforced, I have to delete all of them and create a new one so that its only one listed there at the top.
Doesn't make much sense..!
Title: Re: Access control policy issue
Post by: FurryNutz on March 02, 2015, 11:11:30 AM
Ok, I recommend that you phone contact your regional D-Link support office and ask for level 2 or higher support. This needs to be reviewed by someone higher than level 1 support. If configured correctly which it seems to be, you should be able to have a week rule and a weekend rule set up that doesn't over lap any, and both should work.

One thing you could try, go back one FW version, or two, and see if the same thing happens.
Please use the following if you choose to downgrade:
FW Update Process (http://forums.dlink.com/index.php?topic=42457.0)

I'll try this on my 865L and see what happens. I notice that v1.07 is available here as well. I haven't updated and have v1.06 loaded. I'll set mine up and test. If i find the same thing happening, I'll get this to D-Link here for review as well.

Let us know what they say...
Title: Re: Access control policy issue
Post by: MyDIR865L on March 02, 2015, 11:57:42 AM
Thanks for you help. Unfortunately free D-Link support for this model has ended 2 months ago in my region.
This product was released just over 2 years ago and apparently has been discontinued !!
Title: Re: Access control policy issue
Post by: FurryNutz on March 02, 2015, 12:10:58 PM
See if downgrading FW versions will result in any differences.
Title: Re: Access control policy issue
Post by: MyDIR865L on March 17, 2015, 08:37:03 AM
Sorry about the late response. Unfortunately downgrading the firmware to 1.06 or 1.05 did not help.
The router is only acknowledging the first access rule on the list and nothing else..!
I'm not sure if it is a glitch in this model's firmware, or if it's just my device..?
Title: Re: Access control policy issue
Post by: FurryNutz on March 17, 2015, 08:59:30 AM
Any chance you can try a different device?

It seems that maybe the weekday and weekend policies fail to work when both configured. Can you test selecting M thru F for the weekdays and Sat and Sun for the weekend days? Just as a test to see of this configuration works? I know that you want or first stated configuration to work.

I haven't had a chance to test this yet. My 865L has been working in bridge mode with my 868L. I'll swap them out sometime this evening or tomorrow and get this set up before the weekend hits.


 
Title: Re: Access control policy issue
Post by: MyDIR865L on March 23, 2015, 06:54:20 AM
Unfortunately I don't have another device. I've tired what you've suggested and again, the router only sees the first enabled access policy on the list.
Did you get to try this on your device by any chance?

Thanks.
Title: Re: Access control policy issue
Post by: FurryNutz on March 23, 2015, 07:34:26 AM
Ok.

No I didn't get a chance to do any thing router related this weekend. I'll set up the router this evening and get it ready for the test. Doing some cable installation so my time is limted when I get home this week. Installing new CAT6A infrastructure at home.  ;D

I'll as my resources here about your configuration...
Title: Re: Access control policy issue
Post by: FurryNutz on March 24, 2015, 05:38:09 PM
Ok I've set up your schedules on the router and will add access controls tomorrow. I'm kind of pre-configuring the router before I put it online. I'll set up a couple of devices and check the status on Thursday and Friday to see what happens. I presume I should see something happen between Thursday and Friday since it crosses over to the weekend schedule on Friday.
Title: Re: Access control policy issue
Post by: FurryNutz on March 25, 2015, 07:02:01 PM
Ok I set up 2 policies, one for one PC and one for the other PC. Each pointing to each of the different schedules. Router is online. The weekday one does not have access currently while the other weekend one does. Will see what happens tomorrow.

Title: Re: Access control policy issue
Post by: FurryNutz on March 28, 2015, 09:38:01 AM
Ok, unfortunately I'm able to reproduce the same thing or maybe worse. The one PC that was blocked over the week has not disengaged the policy and remains blocked from the Internet. While the other PC that was supposed to get blocked over the weekend now still has access to the Internet  :-\
Title: Re: Access control policy issue
Post by: MyDIR865L on March 29, 2015, 02:04:03 PM
So should we assume that this is a bug for this router? I hope there would be some sort of fix for it.
Thanks a lot for all your help and effort.
Title: Re: Access control policy issue
Post by: FurryNutz on March 30, 2015, 07:17:50 AM
I'll forward this onto my contact at D-Link and see if there can be something done. This model is EOL so not sure if they can or will do anything to fix it. You may need to get into a different model router. I'll post back if I get any information.  :-\

One thing you could try, load the 1st version of FW thats available and see if the problem is there. Factory reset, load FW, factory reset then set up from scratch. Don't load any saved config files.
Title: Re: Access control policy issue
Post by: FurryNutz on April 08, 2015, 01:41:05 PM
Ok, D-Link will look into this. I can't promise anything. Kind of out of date however maybe a quick fix could be done if possible. I don't know. I'll post back if I get any more information. Please be patient.  ;)
Title: Re: Access control policy issue
Post by: FurryNutz on April 24, 2015, 11:12:15 AM
Just FYI, there is a new security update on the way soon. So it may address this issue. Will need to have a look. Not sure yet, however patch is coming soon.
Title: Re: Access control policy issue
Post by: FurryNutz on April 25, 2015, 01:15:34 PM
You might load this one up and see if it fixes this issue:
http://forums.dlink.com/index.php?topic=62541.0 (http://forums.dlink.com/index.php?topic=62541.0)

Let us know...
Title: Re: Access control policy issue
Post by: FurryNutz on April 27, 2015, 06:48:29 PM
I've loaded my 865L up and it's online. I'll let it run till this weekend and check to see what I find. I hope it might be fixed.  ::)
Title: Re: Access control policy issue
Post by: FurryNutz on May 02, 2015, 11:25:32 AM
Sorry, the patch doesn't seem to fix this problem. I've forwarded my results on to D-Link for review.
Title: Re: Access control policy issue
Post by: MyDIR865L on May 03, 2015, 07:34:59 AM
This issue seems to occur on different D-Link router models from what I saw on other forums, so it might not be just this particular model, but the rather the code of the firmware itself generally speaking.
Thanks for the update.
Title: Re: Access control policy issue
Post by: FurryNutz on May 03, 2015, 11:27:49 AM
Did you take notice of the model # of the routers you saw in these forums? Please post model # or links.

I'll test my 868L out this week and see what happens...

Title: Re: Access control policy issue
Post by: FurryNutz on May 12, 2015, 10:35:46 AM
Hey, zip up a saved router configuration file that has the access control/Schedules configured and email this to me. D-Link needs to review our config files. They should not reproduce so they need to check our config files. You can find my email in my profile.

This issue seems to occur on different D-Link router models from what I saw on other forums, so it might not be just this particular model, but the rather the code of the firmware itself generally speaking.
Thanks for the update.
Title: Re: Access control policy issue
Post by: FurryNutz on May 16, 2015, 08:47:43 AM
Ok, so I changed to using IP addresses using the same configuration rules and it now works. There seems to be problem in using MAC addresses and is being reviewed by D-Link and there maybe a fix forth coming. Please try using IP addresses instead of MACs and test. It's working on my unit.
Title: Re: Access control policy issue
Post by: FurryNutz on May 19, 2015, 07:22:40 AM
Any status on this?  ???

This issue seems to occur on different D-Link router models from what I saw on other forums, so it might not be just this particular model, but the rather the code of the firmware itself generally speaking.
Thanks for the update.
Title: Re: Access control policy issue
Post by: MyDIR865L on May 19, 2015, 07:41:21 AM
Sorry about not replying. I just came back home from a trip. I could try using IP addresses instead of MACs, but I'm not sure how effective that can be unless I set a static IP on each device or reserve their IPs on the router ?!
I'd rather use the MACs method instead since it's less work and more secure.
I'll try it this weekend and see how it goes...!
Title: Re: Access control policy issue
Post by: FurryNutz on May 19, 2015, 07:45:56 AM
Ok. Glad your still around. Ya, I passed this on to D-Link. Not sure when or if the fix will be forth coming. IP is working on my 865L. I just reserved the IP address for the device(s) and it started working. Reservations are good as well. Especially if the devices are constant guests or on your network all the time. Reserving IPs is just as good as using MACs.

Keep us posted.