Hello.
How can I prevent a system user from login by wireless(from winbox/ssh/anything)? I want the admin account can only be accessed by wired connection.
I just thought a solution, I can assign different ip range to wired and wireless, and restrict the user group’s ip address.
Is there any problem with this method?
Should I unbridge the wireless interface to archive this?
So I needn’t to change the Nat settings, if the wireless and wired interfaces are still in the same subnet, right?
Is there any better / more native method?
Thanks.
Use a firewall rule with the in interface match.
Thanks, but can the firewall only block certain user account?
Oh, sorry I misunderstood what you meant. Unfortunately I don’t think this is possible.