Deny a IP

natymache · September 4, 2006, 5:48pm

Hello…

How can I establish firewall rule (maybe input rule) so my DHCP server denies a IP to certain MAC address?

cibernet · September 4, 2006, 5:58pm

Yes you can…

Regards

natymache · September 4, 2006, 6:34pm

[/quote]

Thanks for the answer.

Excuse me for my english, it is not good.

I know that is possible with mikrotik, plese give me an example.

Thanks…

sergejs · September 4, 2006, 7:31pm

Enable static leases, and allow only static leases users to get address from DHCP address.
http://mikrotik.com/docs/ros/2.9/ip/dhcp
Drop communication for the particular host in the firewall, e.g. ‘ip firewall filter add action=drop chain=forward mac-address=XX:XX:XX:XX:XX:XX’.