My company has 4 remoted departements. Each departement is equiped with MikroTik Routerboard-2011uas-2hnd-in. I’ve joined 2 local networks of remoted departements with VPN. Here is the issue: each MikroTik Routerboard-2011uas-2hnd-in serves DHCP for its own local network. After I joined 2 local networks with VPN channel some workstations have recognised as primary DHCP Server not the local one Routerboard-2011uas-2hnd-in, but the remoted one. Which is a problem. When I’ve two DHCP Servers joined over VPN how can I set to make shure that none of local workstation will recognise remoted Routerboard-2011uas-2hnd-in as DHCP Server, but will recognise local Routerboard-2011uas-2hnd-in as DHCP Server?
Yet current version RouterOS is use is 6.10 for all Routerboard-2011uas-2hnd-in
Check if one of the DHCP server assign IP not overlapped over 4 departements
Check fixed IP overlapping over 4 departements
In each of 4 departements IN FIREWALL WE TRUST : DROP all packet from/to other departements on UPD ports 67,68 (also block bootp, another similar dhcp)
You must know how is configured the LAN of each department.
The same as above, you must know the IP on each machine on each department.
Two or more (V)LAN are not joinable freely if one or more devices have same IP address.
You must discover yourself all the IP on the various LAN.
Also the pool of IP the DHCP Servers are using.
Create a new rule in “IP/Firewall/Filter Rules”
Drop all forwarding traffic from UDP port 67 and 68 going to other departments
Drop all forwarding traffic from UDP port 67 and 68 coming from other departments
I not write rule for you because you must know some basic settings and functionality before you proceed,
otherwise you risk to block everything
: DROP all packet from/to other departements on UPD ports 67,68 (also block bootp, another similar dhcp)