hi all
I have a RB333 to make a transparent bridge betwen my switch and my nat static sever.
i want is that only the user match ip and mac can surf.
I dont have hotspot nither dhcp server.
I tried experimenting with this link “http://wiki.mikrotik.com/wiki/How_to_secure_a_network_using_ARP” but the user can still change the ip and browse internet.The above link procedure is not working for me. :~ am i missing something.
I tried this filter to bind IP and MAC,but not working for me,all users browse internet:
add action=drop chain=forward src-address=192.168.X.X src-mac-address=!00:0C:42:XX:XX:XX
- there is a “!” in front of MAC address
i add static ARP Table binding for this particular user,but all user can surfing.
i want is that only the user match ip and mac can surf, if the user not match mac and ip at at arp table,this user never will have surfing.
This is my config:
[admin@MikroTik] /interface> print
Flags: X - disabled, D - dynamic, R - running
NAME TYPE MTU
0 R ether1 ether 1500
1 R ether2 ether 1500
2 R ether3 ether 1500
3 R bridge1 bridge 1500
[admin@MikroTik] /ip arp> print
Flags: X - disabled, I - invalid, H - DHCP, D - dynamic
ADDRESS MAC-ADDRESS INTERFACE
0 172.16.0.250 00:19:D1:90:3F:94 ether3
1 D 172.16.0.250 00:19:D1:90:3F:94 bridge1
[admin@MikroTik] /interface ethernet> print
Flags: X - disabled, R - running
NAME MTU MAC-ADDRESS ARP
0 R ether1 1500 00:0C:42:1C:21:96 enabled
1 R ether2 1500 00:0C:42:1C:21:97 enabled
2 R ether3 1500 00:0C:42:1C:21:98 reply-only
What i am doing Wrong ?
Very Thanks, i will appreciate all your comments.
Carlos