I’m using static dhcp on one of my networks. I have a entry for each pc/printer with its mac address. Is there any way to block traffic coming (/ip firewall filter) if it is not coming from one of my dhcp people? For instance, if they assign a static address to their pc? Basically, I just don’t want to have to write another rule to allow each mac address.
You might want to look at HotSpot.
Try login by MAC..
Things that make you go Hmmmm..
Craig
arp … reply-only
This will do what?
it won’t create arp entries in arp table hence will not answer to that mac address
arp … reply-only
router will server only client that got IP Address from DHCP.
If you put IP Address staticly on the client, the router won’t answer.
(edit: my bad. I misread this post thinking that it was advocating static arp)
Static arp entries are a dangerous thing. Proper switching behavior says that you learn which ports MAC addresses are on, and then send frames to that MAC address via the port it was learned from. If you don’t know where it is, you flood it to all ports.
Dynamic arp entries mean that you’ll never have a destination MAC address to send to unless it’s a live client who has responded to a query, thus causing all switching/bridging devices on the broadcast domain to learn the individual port to get to them.
Creating a static arp entry means that you will be broadcasting packets for that client to everyone, rather than sending nothing other than a limited number of arp query broadcasts because you haven’t gotten an arp response.
I’m not quite sure, but is “static arp” same with “static dhcp”?