Gargoyle Forum

Hi,

I've been using gargoyle for about 2 years now without issue. During that time, like most houses the number of internet capable devices has grown so I obviously want to add more entries to the router.

[*]I'm using a T-Link WD1043ND V1[/*]

[*]I have devices able to connect to wifi using a security key.[/*]

[*]If they are on the approved MAC list they are allocated an IP and allowed Internet access with attached quota[/*]

[*]If they are not on the approved MAC list they can access the internal network for media browsing etc but no internet. (Range outside of allowed range) (192.168.0.100 - 192.168.0.120)[/*]

[*]Currently using 1.6.2? upgraded only last week. Been using 1.5.10 for ages[/*]

The problem is I can only have 20 devices access the internet. Only IP's in the range: 192.168.0.20 - 40 can access the internet. If I allocate an IP on either side of this outside of the blocked DHCP range obviously, internet access does not work.

I have a very vague recollection of possibly setting this range up when I first installed this firmware but no where can I find an entry for this and I could well be mistaken?

Can anyone shed any light on what I might be missing and how I can fix it?

Cheers,
Brad

The DHCP range is set at:
Gargoyle - Connection - Basic - DHCP

The quota range is set at
Gargoyle - Firewall - Quotas

Is this what you are looking for?

nworbnhoj wrote:The DHCP range is set at:
Gargoyle - Connection - Basic - DHCP

The quota range is set at
Gargoyle - Firewall - Quotas

Is this what you are looking for?

Unfortunately not. I know what they are but no where in those settings can I see something that says only devices allocated an IP address from 192.168.0.20 to 192.168.0.40 can access the internet.

DHCP and Quotas work fine and have been for ages. What I want is to be able to expand the 192.168.0.20 - 192.168.0.40 range to something larger so that I can add more devices but I cannot see anywhere in the router where this value would be set. I'm not even sure if it IS set anywhere, I just know that they are the only IP's I can use AND successfully connect to the internet.

If I add IP's outside of that range, they can connect to my local network but do not pass to the internet at all.

Edit: Just to clarify my setup. Devices on the approved MAC list get allocated a static IP from the range 192.168.0.20 to 192.168.0.40. It is this range that is affected. I do not know where this range was set, nor can I find it. I just know if I statically apply an IP address outside of that range, the device still cannot access the internet.

Cheers,
Brad

I am not aware of any "preset" range so I would be looking in one of the sections under "Gaygoyle - Firewall"; most probably Restrictions but QoS is another possible (if unusual) place to look.

If it is not obviously in one of the Firewall sections, then you might like to post screen shots of Connection-DHCP; Firewall-Restrictions and Firewall-Quotas.

Alternatively use a terminal to login to the Gargoyle router and there might be a hint in /etc/config/firewall (you do not want to edit - just peek!)

To be clear, these devices you are static adding are also on the MAC list yes?
Is it this MAC list you are struggling to find?

Can you confirm these devices are receiving the correct IP address you specify?

Bingo!

Thanks guys as you've pointed me to the correct location. The problem was a firewall rule I had set years ago. To enable blocking you need a Block All rule (for want of a better term) with exceptions set within the rule to allow access.

If you click edit on that rule you can plainly see that my memory wasn't faulty, I just couldn't find it. There is in fact a defined range in there. When I originally set this up 20 devices was massive overkill for a single household. Now with kids smartphones, tablets, chromecast, media server and TV's etc I need more than that.

I've now expanded that rule to allow a larger range and all is well.

Cheers,
Brad

Very cool. Glad you're sorted.

ecbrad wrote:To enable blocking you need a Block All rule (for want of a better term) with exceptions set within the rule to allow access.

Great. Not entirely clear from your words - but I believe that you can achieve your objective with the Gargoyle GUI (rather than direct firewall tweaks) which might make it easier to find next time