Community discussions

MikroTik App
 
ameer basim
just joined
Topic Author
Posts: 18
Joined: Tue Jul 10, 2007 2:19 pm

hiding the MAC addrees?

Tue Jul 10, 2007 3:00 pm

I am use mikrotik router v2.9.27 and use winbox to control it .. can I hiding the MAC address to all user in my list to protect him from the network hackers that scanning the network to find all MAC address to person that in my network?
 
User avatar
mipland
Member Candidate
Member Candidate
Posts: 210
Joined: Thu Sep 14, 2006 4:02 am

Re: hiding the MAC addrees?

Tue Jul 10, 2007 4:02 pm

Can you explain it better?
If you hide the MAC address, how the device can comunicate each other?
 
User avatar
umar
just joined
Posts: 2
Joined: Mon Jun 11, 2007 7:54 am
Location: solo, central java, indonesia.
Contact:

Re: hiding the MAC addrees?

Tue Jul 10, 2007 9:55 pm

8) what you mean's to hide MAC address from winbox or neighbors viewer ?
maybe you need setting filter in interface bridge...

[admin@mikrotik] interface bridge> filter print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; block discovery mikrotik
chain=forward in-interface=ether1 mac-protocol=ip dst-port=5678
ip-protocol=udp action=drop

1 ;;; block discovery mikrotik
chain=input in-interface=ether1 mac-protocol=ip dst-port=5678
ip-protocol=udp action=drop

2 ;;; block discovery mikrotik
chain=output mac-protocol=ip dst-port=5678 ip-protocol=udp action=drop

3 ;;; block discovery mikrotik
chain=input in-interface=ether1 mac-protocol=ip dst-port=8291
ip-protocol=tcp action=drop

4 ;;; block winbox mikrotik
chain=forward in-interface=ether1 mac-protocol=ip dst-port=8291
ip-protocol=tcp action=drop

5 ;;; block request DHCP
chain=input mac-protocol=ip dst-port=68 ip-protocol=udp action=drop

6 ;;; block request DHCP
chain=forward mac-protocol=ip dst-port=68 ip-protocol=udp action=drop

7 ;;; block request DHCP
chain=output mac-protocol=ip dst-port=68 ip-protocol=udp action=drop
 
User avatar
broken
newbie
Posts: 29
Joined: Thu Dec 14, 2006 6:35 pm
Location: nowa ruda / poland
Contact:

Re: hiding the MAC addrees?

Fri Jul 13, 2007 4:41 pm

I think blocking the DHCP isn't good solution :) Better is to use broute to right MAC address and disable broadcasting CDP on "user interfaces".
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: hiding the MAC addrees?

Thu Jul 19, 2007 10:18 am

disable neighbor discovery in RouterOS
 
User avatar
mktwifi
Frequent Visitor
Frequent Visitor
Posts: 81
Joined: Wed Oct 15, 2008 9:45 am

Re: hiding the MAC addrees?

Tue Feb 10, 2015 1:38 pm

disable neighbor discovery in RouterOS
I tried to disable neighbor discovery in RouterOS but it didn't work. Doing so winbox doesn't show the router mac address where i disabled neighbor discovery but continue to show all the other mac address of the other equipements connected to the same network. Let me explain better my case:
I have 30 clients (antennas with RB 411 or RB SXT) connected to a RB433 configured in Ap bridge mode. Every antenna is configured with a bridge with the ethernet port and wlan port and a vlan configured on bridge1. Ip address of every antenna is configured on the vlan. If I connect a computer directly to the PoE of one antenna and click on "..." of winbox i see all the antennas connected to that network. Disabling neighbor discovery on RouterOS of the antenna where I'm connected to it's not enough because winbox doesn't show the antenna where I disabled neighbor discovery but continue to show all the other antennas of the network. I need to block the visualization of the other antennas too.

Do you have any suggestion? Thanks.
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: hiding the MAC addrees?

Tue Feb 10, 2015 1:55 pm

1. please don't raise very old topics. this discussion was from 2007.
2. do you connect with wire or wireless when you see the other devices? procedure will be different
 
User avatar
mktwifi
Frequent Visitor
Frequent Visitor
Posts: 81
Joined: Wed Oct 15, 2008 9:45 am

Re: hiding the MAC addrees?

Tue Feb 10, 2015 2:37 pm

1. please don't raise very old topics. this discussion was from 2007.
2. do you connect with wire or wireless when you see the other devices? procedure will be different
Sorry if I raised a very old topic. I connect with wire to the antenna where i disabled neighbor discovery and than I open winbox.
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: hiding the MAC addrees?

Tue Feb 10, 2015 3:13 pm

You connected cable to port 2 or 3 of RB433? Are the ports bridged or switched?
 
User avatar
mktwifi
Frequent Visitor
Frequent Visitor
Posts: 81
Joined: Wed Oct 15, 2008 9:45 am

Re: hiding the MAC addrees?

Tue Feb 10, 2015 4:54 pm

You connected cable to port 2 or 3 of RB433? Are the ports bridged or switched?
No, I'm connect to one of the client with RB411 or RBSXT not to the RB433. Please have a look to the attached schema. The configuration of all the devices is as mantioned before.
You do not have the required permissions to view the files attached to this post.
 
User avatar
mktwifi
Frequent Visitor
Frequent Visitor
Posts: 81
Joined: Wed Oct 15, 2008 9:45 am

Re: hiding the MAC addrees?

Wed Feb 11, 2015 5:21 pm

You connected cable to port 2 or 3 of RB433? Are the ports bridged or switched?
No, I'm connect to one of the client with RB411 or RBSXT not to the RB433. Please have a look to the attached schema. The configuration of all the devices is as mantioned before.
Solved. I've only activated the rule chain=forward mac-protocol=ip dst-port=5678
ip-protocol=udp action=drop in the bridge filter.
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26322
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: hiding the MAC addrees?

Thu Feb 12, 2015 9:15 am

Nice to hear that you solved it. Yes, as I wanted to say, this situation is normal when all devices are in the same bridge. But you already found the filter solution, great!

Who is online

Users browsing this forum: jaclaz, morphema and 24 guests