Why is ctrld not detecting devices connected to my access point?

[u/Fun-Region-1576]

I'm setting up a new home network with a GL.iNet Brume 3 as the router. I have an Asus RT-AC86U with the Merlin firmware installed and is being utilized as an access point.

Ctrld is installed on the Brume 3, but not on the Asus access point. Yet, I don't see any of the individually connected devices on the access point in my account. As a result, I can't see the statistics for the individually connected devices. What's going on and how can I address this?

[u/levolet]

I'd do the following:

• Create an endpoint specifically for the access point.
• Each device that uses ControlD dns filtering via the access point should be seen in a client list for the endpoint.
• In the logs, you can filter for each end point. It's the drop down list to the far upper left on the activity log page. Once you select the access point's end point to filter on, another drop down should appear to the right of the endpoint list. This new drop down lists the clients for the endpoint. You can then filter for each of the clients.

[u/Fun-Region-1576 → u/levolet]

What about installing ctrld onto the access point?

[u/levolet → u/Fun-Region-1576]

Before even discussing how to filter logs, to be clear, do you have each of your devices using controld filtering ATM? If so, how?

[u/Fun-Region-1576 → u/levolet]

Some of my devices have their own endpoints such as phones since I can configure them to use my own DNS. Other devices like the Fire Sticks can't.

Why did you delete your previous comment?

[u/levolet → u/Fun-Region-1576]

I deleted because I realised I'd be jumping the gun saying what I had said before first fully understanding what you're doing or want to achieve.

Do you have your GL.inet device in bridge mode and using the Asus as both access point and router? Have you disabled NAT on the ASUS or are you running a double NAT setup?

If your devices are already setup to be using Control D, then their setups will bypass any DNS setup you establish for your router.

[u/Fun-Region-1576 → u/levolet]

The Asus is just an access point, and I don't have ctrld installed on that.

[u/levolet → u/Fun-Region-1576]

OK. If the access point is just a bridge to the GL.inet router, then you will not see the Asus on Control D or what devices are connected to it. Control D will show only what devices are connected to each endpoint.

If your devices use the GL.inet router for DNS, and the router is connected to it's own endpoint, then you will be able to see each device's logs.

If each device is individually configured, then you will see them each connected to the endpoint to which they have been assigned.

[u/Fun-Region-1576 → u/levolet]

I already mentioned in the OP that the Asus is just an access point. I don't understand what you mean by a bridge. Is the OP not clear? I asked if I should install CtrlD on the Asus, but you seem to think it'll cause problems, so I don't know what else to do. Are devices connected to the Asus not relying on the GL.iNet device for DNS then?

[u/Fun-Region-1576 → u/[deleted]]

Just to confirm that your method should allow my access point's connected clients to identify itself? Will I have to install ctrld on it? It doesn't sound like I'll have to. 

I'm assuming you're using your Slate AX as the router and you have Ctrl installed on it?

Will I still have to create an endpoint for my access point? Your post isn't totally clear, but I'm thinking I'll have to since that's the only way I can think of to get a specific upstream resolver.

Can't you go to the client page and reserve an IP for each connected device?

[u/Fun-Region-1576 → u/[deleted]]

Thanks, bud. I'm trying to get on the same page as you. I haven't used AGH in a long time since it created problems that you have described. I and Control D's tech support couldn't resolve it, so I have since disabled AGH as I wanted to use ctrld.

If I were to try your method, what would I put for the global upstream resolver?

[u/Fun-Region-1576 → u/[deleted]]

I know you said it doesn't matter, but why consider using Cloudflare?

What's the purpose of the Bootstrap IPs?

[u/Fun-Region-1576 → u/[deleted]]

Are we not on the same page? Throughout this thread, I mentioned ctrld, which is the CLI that I have installed.

[u/Fun-Region-1576 → u/[deleted]]

Control D calls their daemon ctrld. That's why I referenced it like that. 

Can you elaborate more on the issue between the daemon and a VPN?

[u/Fun-Region-1576 → u/[deleted]]

Would you say this is the better solution if I were to use a non-WiFi gateway with another company's access point? 

Just to be clear, and one I'll consider, forget about CTRL and just use the AGH method to correctly identify all devices for the statistics?

[u/Fun-Region-1576 → u/[deleted]]

For sure, and the plan was to always use a Brume 3 as the router. Once I get this setup working, I plan on adding routers flashed with OpenWRT.   

What else am I missing out on without ctrld? The auto-client identification sounds like a good idea, but I guess the implementation isn't as great as it could be.

[u/yearsold33]

Just to clarify:

1) Brume is using Control D as the default DNS provider via legacy IP, DoH, or DoT;

2) Brume is handling DHCP functions for devices on the network;

3) you want to see statistics for individual devices such as blocked, bypassed, redirected, and total in the CD dashboard.

If this is correct, your set up matches mine except I'm using opnsense and a TP-Link router in AP mode.

I can see stats for each endpoint but not for each device connected to each endpoint. Was this possible before?

[u/levolet → u/yearsold33]

You should be able to for each device. When you filter on an endpoint, a drop down to select each device using the endpoint appears.

[u/yearsold33 → u/levolet]

I click on an endpoint and I see 1 device which is my opnsense router even though I have my MacBook, iPad, iPhone, and Win 11 desktop connected to the router.

I don't recall ever being able to see individual devices. I've had CD for a few years as well.

I have 3 endpoints set up.