Huawei HG630b Filtering Rule Priority

cookee_nz

Reputable
Nov 13, 2014
7
0
4,510
Hi all, ok so surely this is a simple question but it's barely covered in the manual so perhaps the good oil is to be found here.

In the filtering (parental controls) options of this Router, I can specify filtering by MAC, IP, Application and URL. No problem with that, I have it set up and it seems to work. But I'm baffled by the purpose of the 'Priority' option.

According to the manual and interactive help... "When there are multiple filtering rules, you can define the priorities of these rules". Okaaaay.

Sounds simple right?. The field just allows a number, apparently starting from 0, and I guess can go as high as you have rules to match.

But what's the point? Exactly what 'priority' are you defining. ie, I have two kids with ipads. The MAC filtering is set to time control so that there is no internet access after 8pm (20:00), therefore the rule is to reject all traffic from 20:00 - 23:59.

Each rule has a name, ie "jack-ipad", & "jill-ipad", but can both have the same priority? If not, why not?, if so, why the need to begin with?

Another reference I found during google searching said the rules could be given higher or lower priority. So which is the 'higher' number, 0, or 5? I'm assuming '0'. But why do you even need to specify any priority at all? (it won't allow a blank by the way). There's also reference to nesting rules but that's just adding to the confusion.

So are these priorities common across other router brand filtering options or is this a Huawei peculiarity?

Surely if I set up five rules to restrict certain devices from access at certain times, that's an absolute isn't it?

I wondered if it was easier to understand from just URL filtering. Let's say I decide to block facebook, snapchat and twitter. So I have three url's defined, but I still need to enter a priority. So if FB is #1, SC #2, and TW #3, what is actually being 'prioritised'??

Hope my question makes sense. Certainly more sense than this non-intuitive 'priority' function

HELP!!

Thanks to all in advance 🙂
 
I suspect its more for when multiple rules can apply to traffic and 1 is reject and the other is accept.

For example you permit www.somesite.com but you have a reject www.somesite.com/porn

You need to have those processed in the correct order or it may process the permit before the reject.

Many just run them in the order you enter them but it makes it very hard to change after the fact without deleting and reentering them all. This router appears to let you fix that.

I suspect for most people it does not matter because they have simple rules.
 
I've never worked with a Huawei HG630b, or any of their products really, but the priorities sound like a basic way of giving you some extra control over policies. Based on how you're describing it, this is what I'm imagining:

Say you want to allow your device to reach all websites, except you want to stop jill and jack from getting to youtube (for example).

deny jill-ipad to youtube priority 0
deny jack-ipad to youtube priority 1
allow all users to all websites priority 2

The above (based on my assumptions about these priority settings) would first check if jill is trying to go to youtube, and stop her if so, same for jack, but then if it has confirmed it is not jack or jill attempting to make a connection to youtube, the traffic is allowed through.

This may not be how priorities work for this router, but based on my experience with firewalls/acls, this seems to make sense.

I couldn't find a manual for your model router which mentioned anything about priorities, so I wasn't able to try to read up on it.
 


 
Hi Master Kittens, thanks heaps for your suggestions. I think I follow what you are saying but not really sure how it might apply.

I have several rules I can set up, they can be all identical except for the MAC address - in other words, if I have 15 devices and I want to disable internet access for all of them at the exact same time, for the exact same duration, then surely that is exactly what happens? (via MAC filtering). The internal clock reaches the time set in the rule/s, and at that point the rule/s take effect.

BTW, here's the link to the router manual from my ISP...

http://static.telecom.co.nz/digital-con ... rguide.pdf

As you can see, it's bad on specific detail like I am asking.
 


 
Thanks bill001g - good thinking but not applicable in this instance. There is already an 'Accept / Reject' option which I can set, the rule priority is in addition to the traffic switch.