WNDR4500 Cannot connect Surface 3

I have solved the problem.   I reset the router to the factory defaults.  This caused the Access Control to start working normally, with some exceptions that I will explain below.  I had to reconfigure the router manually.

Before doing the factory default, I backed up the settings.  After restoring the settings from the file, the problem returned and I had to perform another factory default reset and setup the router manually.

The factory default for Access Control is to turn off the general setting for Access Control and leave the Block All Connections radio button pushed.  This effectively disables Access Control.  You can turn on Access Control simply by checking the box to turn on Access Control.  It will then Block all New Connection and the block connections will show up in the access control list as "Blocked."  You can authorize them by checking the box next to the blocked connection and clicking the Allow button.  This is a straight-forward method.  I recommend only turning Access Control on or off and not messing with the radio control buttons to allow or block new connections.  The radio control buttons do not work properly.

I was able to reproduce the problem by clicking the radio control button to "allow all new connections" and turning off Access Control.  This seems to leave the router in a state of blocking new connections, without listing them on the access control list.  It takes another factory default reset to recover from this error condition.

At any rate, problem solved with a work around.