Completely blocked every access to MikroTik

RouterOS General
1

Hello everyone,

I have unusual issue. I unfortunatelly blocked access to production mikrotik at my work. I disabled web access and added wrong firewall rule to drop traffic - which results in cutting me off my device. Can someone help me with accessing and to disable/remove DROP rule on firewall ?

My internal network is 10.80.0.0/24 and the gateway is 10.80.0.1 which I cannot SSH neither Telnet… I allowed ICMP so I can ping gateway and the Internet traffic works fine, except I cannot get in.

Best regards,
Tirou

2

Winbox will work if you connect to the MAC address of the device.

3

What to do when I directly connect my laptop to the mikrotik and I open the Winbox click: […] to open connections and I have empty tables (completely blank) without any MAC addresses?

4

Which model do you have?

5

MikroTIk rb751g-2hnd

6

Did you try to connect both from Ether2,3,4,5 and also the WiFi AP side? You can try to manually enter the MAC address as well, if winbox doesn’t detect it

7
  • I tried only Ether3 ( I cannot disconnect others - production time).
  • Could you explain meaning: WiFI AP side ?
  • If I manually enter router’s MAC address will it require my current credentials, the way as I used login/password connecting via IP address?
8

your model has a wifi access point. scan the available wifi networks from your laptop, connect to the mikrotik network, then scan using Winbox

9

Yes. The problem is that I am connected via ethernet cable to port 3rd to the Mikrotik + I am already connected via Wifi to the same MikroTik - scan shows nothing…

Is it possible that some ether ports are not enable to login via MAC address to the Winbox?
Is it possible to completely block even MAC access to the router ? (the last rule in the firewall I set is to DROP ALL )

10

firewall does not affect the MAC level access, only IP level access.
but a separate configuration menu exists to block MAC level access as well, maybe you blocked it there before:

[admin@MikroTik] /ip neighbor discovery> print 
Flags: X - disabled 
 #   NAME                                                                                                                                                                                             
 0   ether1                                                                                                                                                                                           
 1   ether2                                                                                                                                                                                           
 2   ether3                                                                                                                                                                                           
 3   ether4                                                                                                                                                                                           
 4   ether5                                                                                                                                                                                           
 5   sfp1                                                                                                                                                                                             
 6   wlan1                                                                                                                                                                                            
 7   wlan2                                                                                                                                                                                            
 8   bridge1

In any case. If MAC access does not work from any interface (I know you only tried Ether3, but if this is important, you should unplug somebody and try the other ports at some point), then reinstall or reset is the only choice.

11

Plugging to another ehter port caused that MikroTik showed his face (MAC) :slight_smile:

Thank you for your support. I appreciate it Sir.

Case closed.