@Bonesoul 

Bonesoul wrote

@Clive_A 

 

In your case, you permit all traffic in Default network and restrict the games for specific groups.

 

In my use case (in a factory / business scenario) I need to apply strict restrictions on all networks including Default and only allow a few specific pcs to be unrestricted.

 

I guess this is the reason your setup and my one differ where mine doesn't work as I expected.

 

By the way I do also use oc-400 and have enabled logging traffic option.

 

Can you also show a sample QoS config of yours?

 

Thanks

 

Edit:

 

Upgraded to latest ER8411 firmware 1.3.1 but still the same issue.

And it is incorrect to use DPI for QoS. There is no possibility to use DPI to tag the traffic with priority.

And if you want it to be unrestricted on the VLAN you expect, you should leave it blank instead of selecting any of the apps. Do not select any of the apps if you need to allow.

I don't have QoS as it does not relate to the problem.

  @Clive_A 

No I want to default VLAN (1) to use strictly restricted filter and a specific vlan to bypass the restrictions and use a unrestricted filter as I've explained in my screenshots.

I suspect something is wrong with my VLAN interface settings, can you share your example configs vlan interface settings so I can compare yours and mine?

@Clive_A 

> And if you want it to be unrestricted on the VLAN you expect, you should leave it blank instead of selecting any of the apps. Do not select any of the apps if you need to allow.

Tried this but still did not fix my problem.

I still think either I have a config problem with my VLANs or my 8411 router is not obeying the defined DPI rules. Can you show your examples VLAN config screenshots so I can double check?

Still looking for a solution for this.