i’m a newbie here, i have some clients with their own static IP address range 192.168.0.0/24. If they change their IP to another number, how to make them disconnect to the router. Or in other word, how can we drop unwanted client IP address on our router local interface? thanks
Friend, you should read the manual first before asking here.
But, you can try using mac address protection:
/ip firewall filter add src-mac-address=[client mac address] src-address=![client correct ip address] action=drop
thank you valens … i have another question, can we register or put our client ip address in some kind of ip table in the router? FYI, i use mikrotik OS 2.8.28. Thank you
btw, i already did what u’ve suggested, but the ip i want to drop or reject is still in my firewall connections table, they still have access to the internet.
Isnt your rule will drops every ip except one pair MAC+IP ? I mean it will work only for one client.
Im using construction with lotof pass rules. One pass rule for one MAC+IP pair. At the end i have one rule to drop everyting whats not equal to previous passing rules.
Mahendra:
update to the newest version.
2.9.x have ip address list feature.
Gotmoh, I didn’t check my script yet, and never use it before.
But AFAIK, my script above will do:
Router will block client with mac-address xxxxx if they are not using IP YYYY
If mac-address is not xxxxxx so it will not droped.