How to restrict LAN IP addresses by MAC binding ?

RouterOS General
1

  1. At LAN, I want to restrict each IP addresses by MAC binding so that client end Internet traffic doesn’t support by changing any other client IP .

  2. Suppose I have total Bandwidth 2MB at LAN interface(171.16.1.1/25) and I want to distribute each client MAX as 128kbps ( Not more) for Internet access.

Can you please share your idea ?

Best Regards,

Moshiur
mikrotik.JPG

2

You have to set arp for the particular interface to reply only and make the DHCP server add a static arp entry for each lease. This will stop anyone trying to put in static IP’s except for those IP’s they already have been assigned. You can also make static leases on DHCP so that each user gets the same IP every time.

Regarding queues you’ll need to read the manual, its quite easy.

Regards

Henrik

3

Dear Henrik
Can you please write here your command what you suggested me to do ? I am waiting for your answer.

Best Regards,

Moshiur

Terminal vt102 detected, using multiline input mode
[admin@MikroTik] > ip arp
[admin@MikroTik] ip arp>
add disable enable find print set
comment edit export get remove
[admin@MikroTik] ip arp> print
Flags: X - disabled, I - invalid, H - DHCP, D - dynamic

ADDRESS MAC-ADDRESS INTERFACE

0 D 192.168.1.100 00:1A:73:22:B7:B3 ether1
[admin@MikroTik] ip arp> /interface ethernet print
Flags: X - disabled, R - running

NAME MTU MAC-ADDRESS ARP

0 R ether1 1500 00:E0:7D:91:21:6E enabled
[admin@MikroTik] ip arp>
add disable enable find print set
comment edit export get remove

4

From the manual!..


Submenu level: /interface ethernet

Property Description
name (name; default: etherN) - assigned interface name, whrere ‘N’ is the number of the ethernet interface

arp (disabled | enabled | proxy-arp | reply-only; default: enabled) - Address Resolution Protocol

/Henrik