Blocking Subnet on Bridge link

RouterOS Wireless Networking
1

I need to block some 172.16.x.x sub nets from exiting or entering the Ethernet port on a bridge link. Our upstream provider is using these block and so do we for management. We do not have a router at the demarc due to access issues. The radios have 172.16.x.x address and the one facing the rest of the world has a public too for remote access.

I have have tried dropping all packets on these subnets but nothing seems to work, and no traffic registers on the rule. How can I get the rule to work?

Erik

2

A bridge forwards layer 2, IP doesn’t come into play until higher layers. You can’t filter IPs without routing or some type of packet inspection (which I don’t think ROS offers - a bridge is a bridge!).

3

True enough. But from other wiki articles I have read it did seem you could filter on the interface with out routing. I may have to ask our provider to block those blocks from coming over to our demarc, which would also solve the problem.

Erik