"Block all new devices from connecting" Blocks All Devices

[Thrasher4]

I have an Orbi CBR40 Modem / router and an RBS20 satellite. I've tried several times to turn on the "Block all new devices from connecting" radio button in the http://orbilogin.com/start.htm router admin portal. Each time I get the same result. All currently connected devices become disconnected and nothing can be done to reconnect them. When I call Orbi support the only thing they can do is walk me through resetting and reconfiguring my router and satelite. This causes a disruption of 2-4 hours which prevents us from our jobs and achieves nothing.  Any ideas on how to fix this?

Why? My youngest child is addicted to the internet and constantly shows up with new devices he sleeps with. I want to prevent all new devices from connecting while keeping current devices connected. I've tried 6 of the top-rated parental control apps and he circumvents them all.

[Thrasher4]

I'll add that as part of my support calls with Orbi/Netgear we also upgrade my firmware to the latest version. This did not solve the problem. That said, I've not upgraded it in a while. I'm running V2.5.0.28_1.0.8.

[FURRYe38]

I suggest you seek out a DNS service like OpenDNS, DynDNS or NextDNS. I believe OpenDNS has some controls that you can set up a shedule to limit access. All internet connections would flow thru this when set on the router and when the schedule gets activated, then no internet is possible for particular devices. Something to discuss with OpenDNS and see if they can help you on this. 

Be aware that both Apple and Android have MAC address radomizers enabled on phones and pads. These are enabled by default. Youl can disable them however depending on knowledge of the user, they can re-enable them. Which makes handling and control of some of these devices harder by controlling SW. https://community.netgear.com/t5/Orbi-App/NETGEAR-Mobile-Applications-and-Apple-Devices-FAQ/td-p/222...

Something to remove the one device for a period of time when the user isn't supposed to be on the internet as well. Just a suggestion here. Be sure the user does NOT have access to the router or it's web pages. 

[Thrasher4]

Thank you for the suggestion. Best I can tell, Open DNS is for limiting internet traffic based on content (e.g., no porn) or time of day. These settings apply to all devices equally. It does not have the ability to block devices. When I searched their community on how to block devices it directs back to Netgeer's "Access Controls" which don't work per my original message. 

While I appreciate your parenting advice, it is not possible to remove devices from an addict. If you take one they will just steal another. Every school, house, and person has tons of devices laying around, many of which are not being used and won't even be missed.

Back to the original problem. Netgear built "access controls" to be able to white list and black list devices. Is there no way to get it to actually work?

Thank you

[FURRYe38]

So I put my CBR40 online in a faux AP mode behind a host router to see if could produce this. Ya Block ALL new devices sure does block everything. 

I'll reset and check to see if configuring Access controls works for specific devices. 

[FURRYe38]

Ok, So I did the following by using the "All All Devices" option. 

I have my wired management PC, Android pad and iPhone. Both had the MAC address randomizer enabled for this test. 

Check mark the devices that you seen that need to be controlled. Be sure to leave your management PC (green star) and any allowed or authorized devices un-checked so you don't block these. 

After you have the selected devices checked to be blocked, select the BLOCK button, then select the APPLY button. 

The status should change to BLOCKED on this page. 

I checked my two test devices and though they were connected to the signal, they had ZERO internet access. I check this by trying to access the CBRs web page on both and could not get to the CBRs page. Even when I configured the faux AP mode on the CBR and connected behind my main host router. The one PC had internet, the two wireless devices did not. 

So this should work. NOTE: Only thing is you'll need to keep an eye on this page and look for any new devices online when they appear, if you see something new and you think its the childs device, follow the process and block it. You'll need to keep and eye on the the MAC addresses as well, the MAC address randomizers will change the MAC address so you may see same devices appear with different MAC addresses in the list. 

I recommend you make a list of authorized and known MAC addresses, I'd set these devices with MAC address randomizers to OFF while at home. Then make a screen capture of the access controls page. So you know what devices are allowed and authorized. Then start making changes to the ones that needs to be blocked that appear on the controls page. 

When devices need to change from block to allow, Just do the same thing by checking the device, then select the ALLOW button, the the APPLY button. 

This process seems to work though maybe not smooth or efficient. You'll need to keep an eye on this page and what the child is connecting. Should gain you some controls here. 

Good Luck. 

[FURRYe38]

Any progress on this? 

---

@Thrasher4 wrote:

Thank you for the suggestion. Best I can tell, Open DNS is for limiting internet traffic based on content (e.g., no porn) or time of day. These settings apply to all devices equally. It does not have the ability to block devices. When I searched their community on how to block devices it directs back to Netgeer's "Access Controls" which don't work per my original message. 

While I appreciate your parenting advice, it is not possible to remove devices from an addict. If you take one they will just steal another. Every school, house, and person has tons of devices laying around, many of which are not being used and won't even be missed.

Back to the original problem. Netgear built "access controls" to be able to white list and black list devices. Is there no way to get it to actually work?

Thank you

---