Hi,
i was wondering how can i make my MT ‘invisible’ from the winbox discovery interface? For example, i have two WLAN networks. If in first (in one subnet) my MT can be discovered, if another (different subnet) my MT does not show up.
How can i setup such a configuration?
tx
korg
There are different options to discover your router.
First there is the Winbox Service (tcp 8291) - can be blocked by firewall (allow your management ip addresses and disallow everything else for example)
Second there is the mac-winbox service which you can find under /tool mac-server mac-winbox.
Third option is the mac-server service which you can find under /tool mac-server.
Both the second and third option are MAC based protocols - that means you can not filter it with your ip firewall (atleast not without enabling ip-firewall on your bridge). But you can use the setting in both options to define allowed interfaces (you need to set a list under /interface list first)
Exiver,
tx a lot. I will try all three ways of ‘allowing’ or ‘disallowing’ a discovery.
tx
korg
Sorry i forgot something. The Neighbor Discovery Protocol.. My bad..
See:
https://wiki.mikrotik.com/wiki/Manual:IP/Neighbor_discovery