bind ip address with mac address??

RouterOS The Dude
1

Hi,I’m abig newbie,so excuse me if i sound stupid.I’m sure i am.
What i want to know,is there a way to specify that any user who tries to login with ip,say 1.2.3.4, must do so with a specified MAC address,that he supplied and we save somewhere in miktrotik.

In other words,we supply clients with an ip range,that they use to access the router.Say I give ip 1.2.3.4 to user A.I want to bind this ip to him through his MAC address,to prohibit User B to just enter User A’s ip range into his PC and download on User A’s account.

Thank you for any replies,and sorry if its vague…

2

Simple,

Funny enough, in Mikrotik, there are a million ways to doing a single task, and a singl way of doing multiple tasks.

ur solution, u can simple implement a static ARP list, or

make all your clients get their IP address through a DHCP and then from the DHCP, u make the clients entry static.

Other methods possible, but le me know if u need more help

3

So, what do you do when a user then manipulates there IP to one that is not static and therefore not limited on speed?

4

Ok,i’ve got a static ARP List,now just two things.

  1. I’ve found http://wiki.mikrotik.com/wiki/How_to_secure_a_network_using_ARP,but when i set my interface ARP setting to ARP only it does not work,but if i set it to proxy-arp it seems to authenticate a ip already entered into the static list.Is this ok,why does the reply-only setting as specifed not work?

2)Is there a way to disable ips dynamically getting on the ARP List.For instance,say i have 10 ips in my static ARP list,no other guy will be able to access this ip,but if he has a ip not in the ARP list,but that the router recognizes he will dynamically enter the ARP List.can i turn this off somewehere,in other words if its not in the static ARP List,it wont be able to do anything.

Thanks for any help…

5

I’m using static arp and have it working when set to reply-only. Be sure you are setting it on the right interface. More than likely on the wlan.

Hope that helps!

6

Ok,
Am i right in saying that if your interface is set to reply-only only ips in the static ARP List will work.No ips will be added dynamically.

If its set to enabled,any ip’s not in the static list will be added dynamically and then work,and if the ip is in the list it will use the MAC authentication?

Not sure what the arp-proxy setting does?

7

That is how my rb532 is set up. People can still get a dhcp ip, but if the mac of the radio they are connecting with is not entered into the static arp table with the associated dhcp ip then they won’t get anywhere.


8

i use arp, but my Mikrotik just read mac radio backhaul with my clients IP under that backhaul