dslreports logo
 
    All Forums Hot Topics Gallery
spc
Search similar:


uniqs
2355
fishacura
join:2008-01-25
Phoenixville, PA

fishacura

Member

Re: New Router

I'll check it out. If there are additional settings involved I might be better off simply unplugging/re-plugging cords on the rare occasions I need to access router 2 from PC. Baby steps

rchandra
Stargate Universe fan
Premium Member
join:2000-11-09
14225-2105
ARRIS ONT1000GJ4
EnGenius EAP1250

rchandra

Premium Member

plugging and unplugging? bah...real network admins(tm) use switches with VLANs and just change VLAN membership of the ports. just kidding. Sometimes it's just easier to switch some cables.
fishacura
join:2008-01-25
Phoenixville, PA

fishacura

Member

Believe me it's killing me. Hey I taught myself to build my own PCs so I should be able to learn this too. Just takes time.
Merlin235
join:2014-10-14
USA

Merlin235 to fishacura

Member

to fishacura
If your kids are computer literate most if not all of the above blocking steps will not work.

1. DNS servers simply translate/lookup the public IP of a particular site. If you kid(s) type in 65.196.188.54 instead of Youtube.com they will be connected.

2. If your kids have administrative privileges on their devices they maybe able to select their own DNS server. You also need to set your router to redirect all DNS inquiries using Port 53 to your preferred DNS provider.

3. Running a VPN on a device will also negate any blocking and/or parental controls. If your kids device isn't locked down they can install and run a VPN on their devices.
fishacura
join:2008-01-25
Phoenixville, PA

fishacura

Member

My kids are 8 so I'm okay for a while.

Got the router. SO MANY SETTINGS I have no idea even where to start or how to get this to work. It's really tough. I am typing "fios 2nd network" into youtube and getting nothing but "bridges". Anyone know of a good video or step by step guide for this. Your posts have been really great but there are just so many pages of settings and I cannot even understand where to start on this netgear.
67845017 (banned)
join:2000-12-17
Naperville, IL

67845017 (banned) to Merlin235

Member

to Merlin235
In my house, all devices (except for the computers in my office and the several Chromecasts) require pointing to Open DNS servers. Anything else gets discarded by the router (MI424WR).

Thinkdiff
MVM,
join:2001-08-07
Bronx, NY

Thinkdiff to fishacura

MVM,

to fishacura
Start with the basics..

Plug an ethernet cable from the Netgear's WAN port into one of the LAN ports on the Actiontec. Then plug your computer into the LAN port on the Netgear or join its Wireless network. Then just follow the quick setup instructions that came with the Netgear - basically forget that the Actiontec is there... doesn't matter. Treat is as a "cable/DSL modem" if the instructions include that.

Once you can access webpages successfully behind the Netgear, you only need to find two settings.. the DNS settings on the Netgear and the wireless settings. Enter the OpenDNS IP addresses in the DNS settings and then setup the wireless network + password as you want.

Once that's done, configure the kids' devices to connect to the Netgear's wireless network.
fishacura
join:2008-01-25
Phoenixville, PA

fishacura

Member

Click for full size
Click for full size
Click for full size
First....thanks again for all your patience. There are three pages of settings and I'm not sure which to update. They are Internet Settings, WAN settings and LAN settings...I am going to share screen shots of each....

I am hooked up right now and the internet is working through the netgear so that's a start!!!

Thinkdiff
MVM,
join:2001-08-07
Bronx, NY

Thinkdiff

MVM,

In your first picture, you'll want to go to DNS Address and set it to "Use these DNS Servers". Then enter the IP address (or addresses) you get from OpenDNS. That should enable the filtering through your OpenDNS account.
67845017 (banned)
join:2000-12-17
Naperville, IL

67845017 (banned) to fishacura

Member

to fishacura
I think OP will need the OpenDNS IP updater client also. »support.opendns.com/entr ··· 23282614
fishacura
join:2008-01-25
Phoenixville, PA

fishacura

Member

Which means I do nothing on the WAN setup or LAN setup pages? Just want to confirm.

Thinkdiff
MVM,
join:2001-08-07
Bronx, NY

Thinkdiff

MVM,

Nope.. Defaults there are all fine.
fishacura
join:2008-01-25
Phoenixville, PA

fishacura

Member

You guys are the ABSOLUTE BEST! Got it working. 2nd network set up and wouldn't even allow me access to this site (I knew you folks were into porn lmao!!!)

I really REALLY appreciate it and more importantly you did my family a solid.

Thanks again! Hope I can pay it forward. Sure to be back with questions but for now I am good. Thanks again!

Already found out it doesn't block smart device apps though...ahhh another hurdle to overcome....bad youtube clips!!!

Thinkdiff
MVM,
join:2001-08-07
Bronx, NY

Thinkdiff

MVM,

Great to hear!

Yeah, filtering content within a site is a whole other ballgame. OpenDNS won't be able to do that - it's all or none.

I haven't tried it, so not sure if it's too "kiddy" for 8 year olds, but you can check out the YouTube Kids app. It supposedly filters out the PG-13 and higher YouTube content:
»itunes.apple.com/us/app/ ··· 630?mt=8
»play.google.com/store/ap ··· ds&hl=en

If its appropriate, then you can remove the regular YouTube app and have them use the Kids app. More info about it here:
»support.google.com/youtu ··· =6130504
fishacura
join:2008-01-25
Phoenixville, PA

fishacura

Member

Thanks!

The only thing I have not figured out is logging into the netgear through the Actiontec (without having to unplug the lan from the back of the pc and plug in the netgear directly)

I have a static IP of 192.168.1.254
My WAN page has some 10.0.0.1 setting (not sure what that is)

I have tried 192.168.1.254:80 and 192.168.1.254:80/routerlogin.net but nothing. I think my WAN page setting may need to be changed. Screen shots are above. If anyone is not completely sick of me yet and has advice I am all ears....

Thinkdiff
MVM,
join:2001-08-07
Bronx, NY

Thinkdiff

MVM,

It probably won't be on the WAN settings page. Go to the Internet Setup page first, verify that the IP address listed there is 192.168.1.254. Your first picture showed 192.168.1.11 - you may need to reboot the Netgear to get a new IP address from the Actiontec.

Once you've verified the IP address, look for the "Remote Administration" options, most likely under the Administration button in the pictures you posted. There should be a setting for enabling remote access to the web interface. Typically the port number is 8080 or something like that, so once you find that setting, activate it, and verify the port number (say it's 8080), then you'd go to:

http ://192.168.1.254:8080/

Edit: From here: »kb.netgear.com/app/answe ··· nagement
quote:
To Turn on Remote Management
1. Log in to the router, if you haven't already done so.
2. Click Advanced > Remote Management.
3. Select Turn Remote Management On.
4. Decide whether to give router access to one computer, or several computers in a range of IPs. (You probably shouldn't give access to everyone, unless you have a dial-up connection and a dynamic IP.)
5. If giving access to only one computer, select Only This Computer, and type the computer's IP.
6. If, instead, you want access to a range of IPs select IP Address Range and type the beginning and the end of the range in the From and To boxes. In this example, the starting IP is 68.205.2.56, and the ending IP is 68.205.2.65.

Ignore the IP settings on that page - just set it to "Everyone" for now. Then make sure the port number is 8080.
fishacura
join:2008-01-25
Phoenixville, PA

fishacura

Member

Hmmm found it...set it up...still not finding it but I'll play with it. I should be able to get it to work!!!

Another weird thing now...I'm on OPENdns trying to add my network. I typed 192.168.1.254 and get an error "You cannot add a network in private IP space." Great....thanks for nothing.

The even weirder thing is it keeps telling me my network is 108.16.35.210 No clue where these numbers are coming from. Will need to contact them.

I guess it's a public IP address but probably of the Actiontec...I need it for the netgear and may not have on.

Thinkdiff
MVM,
join:2001-08-07
Bronx, NY

Thinkdiff

MVM,

You should use the public IP address of the Actiontec when setting up OpenDNS. The 108.x.x.x number is likely your public address. You can verify it by going to »www.whatsmyip.org
fishacura
join:2008-01-25
Phoenixville, PA

fishacura

Member

Yes but then I may end up locking down the primary network not the netgear network which I don't want to do....

Thinkdiff
MVM,
join:2001-08-07
Bronx, NY

Thinkdiff

MVM,

Only if you use the OpenDNS server on your Actiontec or other computers connected to the Actiontec.

If your Actiontec is using the default DNS servers from Verizon, then the OpenDNS settings will have no effect on the Actiontec network.

The reasoning is that requests from the Netgear router to OpenDNS are sent through the Actiontec, so the "requesting IP" is always going to be your public IP address.
fishacura
join:2008-01-25
Phoenixville, PA

fishacura

Member

That's right. Forgot. You rock!
fishacura

fishacura

Member

So close. DNS good. Still tinkering with this remote access to netgear router. Have "any pc" checked. port is 8080 so it should be »192.168.1.254:8080 to access the router. Still not allowing it but looks like it might be a browser security thing...not quite sure yet. At any rate, much closer thanks to all the help. Thanks again all!

Thinkdiff
MVM,
join:2001-08-07
Bronx, NY

Thinkdiff

MVM,

Verified the IP address on the Internet Settings page?

Also, try http instead of https.
fishacura
join:2008-01-25
Phoenixville, PA

fishacura

Member

Yup! That IP screenshot was an old one. And dried https first (that's what directions say) but then http. Will try over the next couple of days and if not working maybe post a couple updated screens to see if anyone has advice. But hey, I can live with it for now and the important thing is the internet is locked down!!! Kids are still young but they get old fast in this day and age and I'd rather be ahead of the game.
fishacura

1 edit

fishacura

Member

Click for full size
Click for full size
Click for full size
Here are some screenshots of my setup. I'm not getting a "no page found" which I was getting. I'm getting "security certificate not trusted" error. That page does give me the option to continue but when I do, I still cannot get in. Setup looks right to me...

Looks as if it doesn't like the "security protocol" of the site (router).

Thinkdiff
MVM,
join:2001-08-07
Bronx, NY

Thinkdiff

MVM,

There should be a way to bypass the security certificate problem on most any browser. Which one are you using?

On IE or Chrome, there's usually a "more info" link or something similar that will give you an option to continue anyway. A screenshot of the full browser window at the security screen would be most useful. There aren't any settings on the router that will fix the issue.
fishacura
join:2008-01-25
Phoenixville, PA

fishacura

Member

Yes it most definitely gives me an option to bypass but then errors out again. Will post both pages when I get home. Up and running though and have been tweaking openDNS settings. Great option for us. Thanks for the continued support!
fishacura

fishacura

Member

Click for full size
Click for full size
Here is the 1st screen and 2nd screen I get when continuing on. Weird right? URL absolutely matches.

rchandra
Stargate Universe fan
Premium Member
join:2000-11-09
14225-2105
ARRIS ONT1000GJ4
EnGenius EAP1250

rchandra

Premium Member

Now you see some of the strangeness of IE. Try Chrome, Chromium, or Firefox. At least with Firefox, when I encounter cert errors, almost all times I can click on "I understand the risks" and if warranted tick the checkbox on the next dialog to make the exception permanently. The only trouble I may have had after that is if I didn't make my decision quickly enough and the Web site/device has already closed the connection, in which case I just refresh and I'm good.

not saying other browsers don't have their problems too, but I generally see fewer.
PJL
join:2008-07-24
Long Beach, CA

1 edit

PJL to fishacura

Member

to fishacura
Actually I don't think this is weird at all. In the first instance, you use a URL in which case IE presents the warning with different options. However, in the second you're not using a URL -- you're using an IP address. For security reasons, IE treats this differently than the first and doesn't allow any options because access via IP is less secure because anyone can implant an IP link in a page but only the domain owner can register the site's master domain and referrals from that domain's root DNS are controlled by the company -- so any page using the URL address within that domain are to actual sites within that domain since the root refers the browser to them.