Can a VPN override an internet filter

Fritzbox tuning: the best tips for everyday life

Hermann Apfelböck, Stephan Lamprecht, Roland Freist, Thomas Rau, Peter Stelzel-Morawietz and Christoph Hoffmann

Thanks to numerous additional functions, the Fritzbox models play a central role in the home network. This article gives you a whole series of tips with which you can make more of the Fritzbox or use the device more comfortably.

With the Fritzbox, the manufacturer AVM made a big hit over ten years ago. With market shares between 60 and 70 percent, the devices are among the most popular modem-router combinations in Germany. And the Fritzbox can do a lot more than just connect to the Internet. In this article we introduce you to additional functions and reveal tricks on how to use your Fritzbox more conveniently.

Note 1: Access to the configuration interface of the router is required in the following: It takes place in the browser with the IP address of the router (often or or with the name

Note 2: It is possible that not all of the functions described here are always activated on Fritzboxes that you received directly from your Internet provider.

Fast Ethernet or Gigabit LAN

If you mainly have network devices with Gigabit Ethernet, you should definitely check the "Network settings" under "Home network -› Home network overview ". The four LAN ports of the Fritzbox, with the exception of LAN 1, are usually throttled in the delivery state. They run in the energy-saving "Green Mode" with Fast Ethernet performance, ie at 100 Mbit / s. Set to "Power Mode" if the connected client or switch supports it.

IP and address space of the router

EnlargeChange the IP address of a new Fritzbox.

Home users often don't care whether the router has the IP or 192.168. 1.1 is preconfigured and therefore the address space 192.168 for all local devices. 178. [1–255] or 192.168.1. [1–255]. The situation is different when a new router comes into a carefully configured network, where server services with a fixed IP are set up and scripts or browser bookmarks expect specific IP addresses.

Here, changing all the details to a new address space would be a time-consuming task. All routers therefore allow you to set your own IP manually. In the Fritzbox go to “Home network -› Home network overview - ›Network settings”. In the extended view you will find the button "IPv4 addresses". Here you can specify the desired IP address at the top.

Guest access: WLAN and LAN4

EnlargePre-configured guest access for visitors.

With the guest access under "WLAN -› Guest access - ›Guest access active", the Fritzbox can provide guests with a separate Internet access that is separate from the rest of the network. The guest WLAN has its own network identifier (SSID) and its own password. So you don't have to give the primary WiFi password to guests. In addition, the guest WLAN has no access to the local network and its Samba or SSH shares (client isolation). If you activate the additional option “Restrict Internet applications: only surfing and e-mailing allowed”, then all ports in the guest network that are responsible for FTP or bit torrent are also closed. In order to exchange photos or music via the WLAN, however, you can allow the guest devices to talk to each other. To do this, select the option "WLAN devices are allowed to communicate".

In addition to the guest WLAN, the Fritzbox also provides a wired guest access at LAN port 4. It can be activated with a click of the mouse under “Home network -› Home network overview - ›Network settings”. There are no further settings here: Client isolation applies again to the connected device, which does not allow communication with the local network.

Parental controls for the internet

Every home admin who is responsible for adolescents should take the time to edit the "child protection" of the Fritzbox. Children and young people can be regulated in terms of time and content by the technical authority of the router without having to constantly monitor them themselves. The rules are to be activated for each individual power supply unit under “Internet -› Filter - ›Parental Control”. Access profiles ("Standard", "Unrestricted"), to which you then assign the respective device, are required. There are time restrictions, protocol bans and the option of creating an allowed whitelist (very restrictive) or a prohibited blacklist. The blacklist can be added manually, but the specified BPJM module (Federal Testing Office for Media Harmful to Young People) can do the main work. The module can be activated simply by ticking the box under “Internet -› Filter ”. The restrictions for the "guest" access explained above are also based on an "access profile".