any tutorial about bridging rule…???
weks…anyone ![]()
What kind of rules tutorial do you need ?
http://www.mikrotik.com/testdocs/ros/2.9/interface/bridge_content.php#4.14.7
wew finally…well i already read the bridge manual but that dont result anything…in bridge-filter does it same as firewall for bridging..??
Bridge firewall implements filtering for data from to or trough bridge.
is that mean the same as firewall in ip-firewall…??
Yes.
well i try a simple rule in bridge-filter but it didnt work…??
the rule is like this :
interface: in interface-lan1
out interface-lan2
IP : src.address-192.168.10.0/24
dst.address-10.10.15.0/24
Action : drop
lan1 & lan2 is in the same bridge
can anyone help…pliss
Could you provide complete rule or export from ‘interface bridge fiter’ ?
interface-bridge-filter>add chain=forward in-interface=lan1 out-interface=lan2 src.address=192.168.10.0/24 dst.address=10.10.15.0/24 action=drop
note :
i got 4 ether and i bridge all
when i apply the rule the 192.168.10.0/24 still can connect to 10.10.15.0/24…???
is something wrong with my rule…if so please help…thx
hello…need help pliss ![]()
to filter traffic going through your bridge (going from one interface to another) you need to add rules to “forward” chain.
The input/output chains are reserved for traffic going TO or FROM your bridge, as in winbox and routed traffic.
@sten can i delete the bridge (that connected all the ether) and set all the 4 ether with specified ip…with the same subnet..and i want all the 4 ether are connected?? i’ve try this one but all the 4 ether cannt connected!!!
what’s your configuration?
and what do you want to achieve?
![]()
okay heres my configuration that i want to achive:
ether 1 - with ip = 10.10.1.1/255.255.0.0 (local) (reply only)
ether 2 - with ip = 10.10.2.1/255.255.0.0 (local)
ether 3 - with ip = 10.10.3.1/255.255.0.0 (local)
ether 4 - with ip = 202.165.x.x (global)
what i want to is all ether can connect each other without to creat a bridge…!!!
thx
Address overlap… they’re all 10.10/16
Well, if you do not create a bridge, then you’d have to route… but you can’t because your network address ranges overlap. Sounds like you’re stuck and need to rethink your network design.
–Tom
so that means i need to bridge, right??
no
you have a fundamental flaw in your design
you need to apply correct subnet masks.
hint: correct subnet masks for the subnetting you chose is 255.255.255.0 but you need to find out how this affects your routing tables.