I could certainly try, but the gist is: I have a Mikrotik hAP ac² that I setup the VLANs on, and then some NAT rules that force DNS requests to go to the kid s

I could certainly try, but the gist is: I have a Mikrotik hAP ac² that I setup the VLANs on, and then some NAT rules that force DNS requests to go to the kid specific raspberry pi if its their VLAN I also have a Unifi AP for WiFI, which uses radius auth to set the VLAN for devices. So everyone has their own user/password for WiFi, and it sets the VLAN based on that. Each room also has a network socket in (I ran a load when we bought this house - they aren't used yet in their rooms) which goes back to a netgear managed switch, so if they were to plug into their room, they would get their VLAN also. At some point I need to sort out a way to limit the speed after a certain time on their VLAN, but it's not super important at the moment. Edit: Just to add, this was also done as a learning exercise for me, but I think it kinda makes sense. As the youngest get older, we can talk to them about being safe online, and what not to do etc. But at the moment I figure it's the same as locking the cabinet under the sink, or not letting them use the big sharp knives. Sure as they get older we can change it, but at the moment it means they can enjoy the new funky technology without being hassled by some dodgy advert or troll hassling them lol