prevent access from ppoe clients to mikrotik

RouterOS Beginner Basics
1

Hello.

I have set up a ppoe server and now clients can browse internet. But the problem is that clients can access to my entire network and then open my routers, access points, cpes, etc.. How can I prevent this?

My networks diagram is like this:

10.100.1.1 (router mikrotik ppoe server)

10.100.1.2 (access point)

10.100.1.3 (cpe)

router for customer (192.168.0.1ppoe client)

192.168.0.2 (pc)

So from 192.168.0.2 the customer can access to my mikrotik router or access points.

Hope anyone can help me, thank yopu very much in advance.

Best regards.

Fran

2

anyone?

3

why don’t you put passwords to all of your routers?

4

Block the traffic in your input chain of the firewall

5

You can limit layer 2 traffic from the customer router to PPPoE traffic. If the PPPoE connection also provides layer 3 to infrastructure you need to consider appropriate later 3 controls such as firewall settings.

6

you mean to block the rest of connections but the ppoe traffic using an input firewall rule?

7

If the connection is bridged you can use bridge filters to restrict traffic to PPPoE traffic.

8

Hello, I have done a rule for restrict all forward and input PPP traffic aimed to my internal networks. and it is working perfectly.

thanks for your help.