hello friends,am new to mtik however as far as i have studied it ,i beleive everything is possible .Am here tryig to build a bridged firewall with mikrotik.since i am new to mtik dnt really know what hardware 433ah,450g /// will be best for my utilization.
let me give you a small layout here
wan>>>>>>gateway/dhcp/>>>>>>>>bridge firewall>>>>>>>>>distribution>>>>>wlan aps
plz plz revert me ASAP on this
Either board will do exactly the same for you. They have the same amount of RAM and processing power. The 433 will allow you to connect up to 3 mini pci cards to it for wireless, and the 450g has gigabit ports where as the 433 does not. It’s really up to you what one you want to use, though I believe the 450g will be a bit cheaper.
thanks on the first go,i think here is a need that i should be more discriptive ,i just neeed to handle a small user base of 200 customers kindly suggest how to build the bridge firewall using mikrotik
Bridge two ports together, your “uplink” and “downlink” ports. In bridge settings set “Use IP Firewall”. Then build your mangle and filter rules in the forward chain like you normally would.
am happy to c that this forum really listen
so am expecting one more guideline here ,i need to design tha bridge firewall but dnt know how to do it,any link which cud guide me thro the steps plzzzzzzz
Why do you even need to use “bridge” on the Mikrotik? I’m talking about “bridging” 2 Interfaces (not sure if that’s what you mean).
I usually just delete all “bridges/bridge ports” and just work with individual ports (different network on each port). Get a switch and plug in to each port - this will give you a separate network on each port. I think it’s much better NOT to use a “bridge” port on the mikrotik, and just get a regular hardware switch. Especially since you’ll have 200 people using that port, get a switch. Then if you don’t use any “bridge”, then you can easily set-up a firewall on a single port, can even probably just use a default firewall that’s already on the default tik setup. I don’t normally care about securing Wi-Fi users as they should have firewalls on their individual computers anyway.
For 200 users, get RB450G - it’s one of the more powerful small routers, then connect AP’s to the switches.
Everything that the firewall is capable of is available if you set up the router as I discribed. With the setup you described you are basically building a transparent firewall.