I'm using CRS125-24G-1S-2HnD router and I need to install sniffer-host in my network. I was trying with Packet Sniffer but that method is using a lot of cpu.
How can I configure port mirroring on that router to sniffing on another machine?
If there are in domain it's not problem to push out the certs for them. About half of computers are not in domain (shitty Windows Home Premium) and I don't want to configure them.If the users are on the domain anyway, why not just push out the cert to them?
But this is not the answer for my question - I would like to know what is wrong that I've got ip assigned by proper dhcp and it's not working good, blocking dhcp traffic will not resolve my problem.You'd have to set up some firewall rules to block DHCP and enable IP firewall on your bridge.
So that means that VLANs are not isolated and are visible to each other with default configuration?If you want the VLANs isolated at layer 3 you need to use forwarding filters in IP Firewall.