Disable Wireless access to config

RouterOS General
1

I’d like to disable access to router configuration from wireless networks, only allow it from connections through physical ports. Is it possible? (RouterOS v6.41, MikroTik hAP lite). Is this possible, and if so, how?

2

Firewall Rule:

/ip firewall filter
add chain=input in-interface=wlan1 dst-port=21,22,23,80,8291 protocol=tcp action=drop
add chain=input in-interface=wlan1 dst-port=21,22,23,80,8291 protocol=udp action=drop

You would need these for each interface name you want to drop.

Edit: Fat fingered the submit button and didn’t get back to it in a timely maner!

3

If your wlan interface are in a bridge, you can’t use the above firewall rules.
What you can do is to allow the access via IP > Services.

/ip service 
set address=10.0.0.0/29,192.168.66.78 winbox,www

The address can be a subnet or hosts separated by commas.
Ex: 10.0.0.0/29; 10.0.0.3,10.0.0.46,192.168.66.78
Also can contain subnet and hosts.

4

This is correct, I wasn’t thinking at all today!