Hi I have MT and the configuration i below.
Ether 1 : WAN 59.X.X.X/27 - One POOL
Ether 2 : LAN 59.160.X.X/27 - Second Pool.
Ether 3 : 128.0.0.1/16 - Private Pool.
Now i am serving my custome thru Ether2 & 3. I have 30 Public IP in second pool.
For Ether 3 src nat is working for perticular IP. Suppose if i want to give access to 128.0.0.100 i will do src nat. it works fine.
But for real IP i cant do src nat. as all the IPs are routed. Now i am using just 5 IPs out of 30.
What i have to do to drop another IPs. so nobody can ge access if somebody use the same in my NETWORk.
I.e i want to give internet to only 5 Ips out of 30 and for rest i dont want give access.
janisk
March 6, 2007, 6:26am
2
btw, 128.0.x.x/16 is ip addresses in Amsterdam.
i would suggest to read here:
http://www.mikrotik.com/testdocs/ros/2.9
I DON’T Understand…Its my LAN and PRIVATE IP SERIES,
JUST i want to drop the additional PUBLIC IP from my existing IP POOL
Ashisheitl,
If i’m understanding right all it sounds like to me is you are wanting a firewall rule that will drop internet access to all traffic to certain ip addresses?
If so then just setup a drop rule in your forward chain that will drop packets from that ip range.
http://www.mikrotik.com/testdocs/ros/2.9/ip/filter.php
This website will guide you in the right direction.
mneumark:
Ashisheitl,
If i’m understanding right all it sounds like to me is you are wanting a firewall rule that will drop internet access to all traffic to certain ip addresses?
If so then just setup a drop rule in your forward chain that will drop packets from that ip range.
http://www.mikrotik.com/testdocs/ros/2.9/ip/filter.php
This website will guide you in the right direction.
Thanks Buudy,
That is WHAT I WANT..Thanks Again