how to limit stepson's usage of internet? new to opsense.

[tanks]

Good advice in general.

However, depending on how crafty the users are ideally you would need to use a switch with DHCP-snooping and ARP inspection to prevent them from changing MAC or configuring static IP's to work around the limitations on the dynamically allocated ones.

Another solution would be to used a separate VLAN and apply limits on the entire subnet.

Works for me so far. Have not thought of that, not a network expert though.

[cookiemonster]

Hi. Good ideas the OP and I could use to try. Thanks.

[mestafin]

Don't current iOS mobile devices randomize MAC addresses to prevent tracking?  It can be disabled by the user for home networks, but then can also be re-enabled by the user.  No idea about android...guessing same.

That is true, but it can be switched off per network in the iOS device.

Go with the suggestion above: Deny unknown clients.  If he does not switch the random MAC address feature off, he will never get an IP address assigned, even during allowed time slots.

[thorneo]

I still can not get this to work..

[cookiemonster]

It would be useful to know what you tried and how are things setup at the moment in your network.

[Drdave]

The other way to do this is to use a deny all rule then whitelist the devices that you need to access the Internet.  This gets away from the changing mac address that mobile devices use to  "protect your privacy".

Of course if he learns to spoof an mac address with a whitelisted device!