Hi, i have a huge network, with 1200 pppoe customers. There are wireless users incoming in one “interface ethernet” and others users have Fiber Optic, and are in another Ethernet interface. Every ethernet interface have diferent subnets.
Now i have only the “Fiber optic” subnet with OSPF and MPLS, but seems that all the interfaces were published in the routing table, because now i can ping to everything from one subnet to another. At first, without Fiber optic interface (with OSPF), i couldn’t ping my private ubiquiti rockets, but now everything is open.!! How i can fix this ?
Thanks.
Best regards.
If you are trying to secure devices, the best way to do that is by configuring the firewall, rather than by preventing routing. It is typical to create firewall rules to prevent users from being able to access management subnets. I assume your device management IPs are on different subnets from your customers?
@mducharme, Yes, the devices are in different subnets than customers, (and in different vlans each other). Was a surprise for me see that they were accessible from everywhere, because they aren’t in the OSPF network setup.
Thanks.
The router will forward directly connected subnets even if you are not running a routing protocol. I assume those frames are making it to those devices because the Mikrotik router has an IP on that subnet, and the Mikrotik also acts as the default gateway for the customers on the other subnet. It is better to use OSPF everywhere to advertise all subnets and to block user access with firewalls. Blocking by not routing impedes your management of the network.
Thanks @mducharme, very usefull !!!
have a good wekend!.