Block all mac address except those allowed on a bridge

RouterOS General
1

Hi all,
in installation i have some router RB450G, configures as:
ETH1 on a segment of a Lan " example 10.10.10.1/24 "
One Bridge with ports from ETH1 to ETH5, on another Lan " Example 192.168.1.1/24"

O the bridge we have two client " one Win and one Linux " and two technical instrument.
We nedd to block on the bridge all Mac address except those four.

So, i tried as

/ip firewall filter
add chain=forward src-mac-address=aa:bb:cc:dd:ee:ff action=drop

And i can block only the known Address
i tried to add the exclamation mark, and i can block all Mac except this address, but if i add more rules with other addresses, the rules don’t work. :open_mouth:

someone have some ideas ? :smiley:

2

You can assign IP Addresses based on MAC with DHCP.

3

No, i can’t use the DHCP in this network.
Thanks

4

Use static arp.

Sent from my SCH-I545 using Tapatalk