Limiting Admin access.

Is there a way to define which interfaces Winbox is available to be used on ?

e.g. I want to turn it off on all interfaces apart from ether1 and vlan1000

It is possible to use firewall to filter Winbox connections.

  • use chain=input, chain is responsible for connections originated to router;
  • Winbox uses 8291 TCP port by default.
  • use action=accept to accept connection for Winbox you need;
  • use action=drop to drop connection to Winbox you do not need,
    http://www.mikrotik.com/testdocs/ros/2.9/ip/filter.php