Port authentication

RouterOS General
1

Hi,
I have a RB751G-2HnD router running firmware 5.20 in our home.
Sometimes I disable port ether-5 to disconnect our TV from our network, however my son usually change the cables between port ether-5 and another port that has connection to gain access.
I am wondering if I can lock the ports to the MAC address of the devices that are already connected to prevent this cable swapping.
I will appreciate if you can provide the configuration script as well.
Regards,
John

2
  1. In the DHCP server give the TV a static IP
  2. In the firewall drop the forward chain for the TV’s IP (Enable/Disable this rule as needed)
  3. Tell the kid if he attempts to subvert your will again, that he will burn in perdition’s flames.

If the issue is not internet access but network access instead this wont work, but it can still be done with another method.

3

Thanks tws101, however this is not what I am looking for. We have a Netgear L2 switch in our office and we are able to authenticate the requests for connections based on their MAC address per each port preventing unauthorized access to our network.
I am looking for the same feature for Mikrotik.

4

Okay at L2 on Mikrotik no you can’t do that.

However you can:

  1. Deny by mac the TV a DHCP address
  2. subnet it out on its own port
  3. create a second DHCP server with one reserved IP address for it on that subnet
  4. Enable 1 to 1 NAT to allow broadcasts (Enable and disable when you need to allow/deny access)