@ArcherC8 For the availability of the guest network itself? Perhaps...

@Tony Yes, the WiFi Schedule is my current strategy. It affects my devices, too, of course, but it is effective.

Note: the router didn't seem to understand "22 - 07" so I had to add it in two chunks: "22 - 24" and "00 - 07"

I'll take a look at the MAC filtering. If that can be scheduled, I might switch to that (plus it would address potential wired work-arounds - these kids are clever). Next thing ya know, they'll be cloning the MAC address from one of *my* devices (or similar to one of my MAC addresses).

@Tony it's too bad the parental controls don't seem to be based on the MAC address. I still don't understand how the use of VPN would allow a "paused" client to skate on by and surf unimpeded. The router should be able to control the devices on its own network; by MAC or internal IP or device name.

@Tony Access Control doesn't seem to be scheduled or time-bound and I don't want to be moving them in and out of the blacklist each day. I think WiFi scheduling will suffice for now. Thanks!

@ArcherC8 The guest networks don't seem to have a schedule on this router, but the WiFi radios themselves do.

@Tony This post is errantly marked as a solution.  Disabling wi-fi for the entire router is certainly not an ideal solution by any measure.  In fact, a better solution (if we're going to hack things together rather than fix the issue), might be to have the router reboot nightly at Bed Time.  This would drop the kid's VPN and prevent them from re-establishing it (now that Bed Time restrictions are in effect).

A "Solution" would be to drop all matching traffic, rather than to only prevent new connections from being established.

@ArcherC8 I'll give that a try. Too bad the parental controls are so easily bypassed.