blocking devices off your network

How do i block devices off my router?
Whats the easyest way?

I’ve tried using firewall and some other methods but nothing worked.
Its as almost tho that i need to just straight up turn off wireless.

Your requirement is not clear.
Please state what you want users to be able or not able to do.
Please state what you want devices to be able or not able to do…

Blocking a device on lan to not use your net may not be easy. He can change IP to a new that is working. MAC address can be changed if that is blocked. PPPoE may give some control. Only good solution is to prevent physical access to the network.

I just wana make it so that the device cant acces the internet nor lan

Make a static DHCP for the mac of the client, then block the IP.
But as I said, if that is a clever person, he just changes his mac. Some I do at airports to get a new free wifi periode.

Again, describe the situation in sufficient detail.
What devices?
How do they attach to the network to begin with
What is their purpose.
Stop being so obtuse…

How do i block the ip?

Some like this:

/ip firewall filter
add action=drop chain=forward src-address=192.168.88.40

This doesent work in the slightest i even reboted the router.

Could it be that fact that this router was given to me by my isp and has some presets in the firewall thing???

unless you post your config answers will be hard to come by
/export hide-sensitive file=anynameyouwish

Yes, and as Anav posted, without seeing you configuration, it would be hard to help.

Alright
Yessffagrthrhrt.rsc (9.29 KB)

I do not find any DHCP reservation or access rule for 192.168.88.40.

Some like this:

/ip dhcp-server lease
add address=192.168.88.40  mac-address=AA:AA:AA:00:FE:CC server=defconf

You have named DHCP as “defconf”, not a good name to use.

I can not see at first glims any big error in the config.

PS user button below post. No need to quote post above you.

I dont get any of this.

Is there just a more simple way?
Cuz on my old router i could just open a page and block any device.

MT router have some steep learning curve. But when you get the hang of it, you will love it.

To reserve an IP for Winbox or Webif gui.

IP->DHCP Server->Leases->+ → add IP and Mac address->OK

Or start a terminal and cut/past command I posted above. Set mac correct first.

That is just meaning “default configuration”, it is the name set by MikroTik when you accept the default configuration or use the Quick Set menu to configure things.
Besides that, the name does not influence the behavior in any way.

Is there just a more simple way?
Cuz on my old router i could just open a page and block any device.

Well, that is the difference between consumer routers and MikroTik. MikroTik routers are for network professionals, they do not have such features.
Also, even with that old router it would not really work, i.e. it would be easy to work around.

Curious as to where you got the idea that mikrotik were consumer dumbed down devices??
The config seems okay on a quick view.

Well my isp gave me this for free so yeah.