Community discussions

MikroTik App
 
samuelongui
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 52
Joined: Wed Mar 02, 2011 9:07 pm

PPoE clients can see all my net

Mon Jul 08, 2013 6:51 pm

Hi all,

I have set up a PPPoE server. Is running OK but a PPPoE can see my network, for example:

my WAN is 192.168.1.1 and PPPoE pool is 192.168.2.1. CPE client is Ubiquiti router to 192.168.1.1. If in a client I browse http://192.168.2.1 he can acces to my RB.

I'm on 192.168.1.1 network and if I browse to CPE's client IP or to 192.168.2.1 no response :(
 
HaPe
Member Candidate
Member Candidate
Posts: 239
Joined: Fri Feb 10, 2012 10:24 pm
Location: Poland

Re: PPoE clients can see all my net

Tue Jul 09, 2013 9:47 am

If you use wireless, disable default forward. You can deny forwarding using filter in ip>firewall and ipv6>firewall.
 
samuelongui
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 52
Joined: Wed Mar 02, 2011 9:07 pm

Re: PPoE clients can see all my net

Tue Jul 09, 2013 10:57 am

Thanks for your answer.

I'm connected to RB751 by wireless, I can't do it by cable, it's upstairs.

I have no filter rules, only the default ones hotspot adds.

At firewall-NAT I have the default ones hotspot adds and these:
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment="place hotspot rules here" disabled=yes
add action=masquerade chain=srcnat comment="masquerade hotspot network" disabled=no src-address=\
    192.168.3.0/24
add action=masquerade chain=srcnat disabled=no src-address=192.168.2.0/24
/ip pool
add name=pool-PPPoE ranges=192.168.2.2-192.168.2.254
add name=pool-Hotspot ranges=192.168.3.2-192.168.3.254
Image

bridge is WAN and Wifi.

If need more info, please ask.
 
HaPe
Member Candidate
Member Candidate
Posts: 239
Joined: Fri Feb 10, 2012 10:24 pm
Location: Poland

Re: PPoE clients can see all my net

Tue Jul 09, 2013 11:45 am

IP>addresses please
 
samuelongui
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 52
Joined: Wed Mar 02, 2011 9:07 pm

Re: PPoE clients can see all my net

Tue Jul 09, 2013 12:36 pm

/ip address
add address=192.168.1.4/24 comment=WAN disabled=no interface=Wifi network=192.168.1.0
add address=192.168.3.1/24 comment=Hotspot disabled=no interface=PPPoE network=192.168.3.
 
samuelongui
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 52
Joined: Wed Mar 02, 2011 9:07 pm

Re: PPoE clients can see all my net

Wed Jul 24, 2013 5:52 pm

Any help please?

Who is online

Users browsing this forum: Ahrefs [Bot], lubara and 170 guests