User set himself router's IP (not MT router, the other one)

User is setting himself wrong IP - another user one or router.
If he use main router IP, then all network is stopped for several minutes.
How to prevent it? On which INTERFACE I HAVE TO ADD STATIC IP?

It’s third time I’m asking the same. No answer yet.
Yes, I read manual

Do a proper network design.

Still waiting for your definition of “proper network”.

Share it with us.

I think he may mean route not bridge.

So

AP (You control)
Station/Router (You control)
Customer (customer control)

This means customer can set any IP and will only affect him

Him and everyone on this router.

not router but interface, but yeah
so one interface pr customer and your set.

Or just block all addresses except the ones they should be using on the inside (private, LAN, etc) port.

It would block the offender from reaching the internet but not from stealing the ip. The person who’s IP that is will definitly find it unreasonable.

What if the offender uses his regualar ip for surfing and the stolen ip for his fileserver… He would still reach it :slight_smile:

I think I misunderstood the post then.

Static ARP entries should solve this, if you want to account for all of your customer’s MAC addresses…or even PPPOE.

How is it that your customer keeps changing his IP address? This should only need to be done once when first installed?! What about DHCP?

And why is he still a customer after the first time you catch him screwing with your network …

Because DSL competition haven’t such problems.

so what? this person breaks your network. disconnect him

Because their equipment form point-to-point connections.
Many choose to connect the ADSL via PPPoA and the edge equipment will copy the PPP payload of the PPPoA packets into L2TP tunnels into core router.

I use statis ARP, and work’s…
When client configure a wrong IP, then never connect to router…

(Kapusta
przypisz w (ARP) - MAC’ki do IP na stale i wtedy bedzie gralo)(the same but in our language)

I’m doing it on my main gate (linuks). I don’t know to which interface make static arp on Mikrotik. And it’s not enough, I have to set arp reply only but dont know where and what are the new problems with this settings.