Block Traffic from LAN side

RouterOS General
1

Hi,

i am using Mikrotik hex Lite router, i do not want to enable DHCP, my DHCP is off, i just want to block access from LAN side, let me explain,
suppose my lan ip is 192.168.1. 1, now everyone can configure static ip with their own effort and configured an ip from 192.168.1.1 to 254.. i cant block it, i have set ip 192.168.1.20 for a pc and set bandwidth limits, now when he will change ip 20 to 19 then my bandwidth limitation will not work.

So please tell me how to stop this, i want to set limitation on MAC IDs, but i have no idea how to do it, is there anyone who can help me?? please!!!

Regards,
Shahid

2

You can add a static arp entry for that MAC and IP adress. Also you have to set your Bridge arp to reply only.
From the wiki https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge
"
reply-only - the interface will only reply to requests originated from matching IP address/MAC address combinations which are entered as static entries in the IP/ARP table. No dynamic entries will be automatically stored in the IP/ARP table. Therefore for communications to be successful, a valid static entry must already exist.
"

3

Thanks for your help, let me check this option

4

Let me know if it works fine.

5

i am new in mikrotik router so it will take time, if you know how to do it then please tell me because i require this on urgent basis, :slight_smile:

Thanks for your concern…

6

very sorry for late reply,
but your suggestion is working perfectly …

thanks a lot for your support…

7

You can mark post as solved…