Community discussions

MUM Europe 2020
 
hi4ibb
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 97
Joined: Mon Jan 18, 2016 4:36 pm

Plz MikroTik , give me solution for netcut and theft of Mac address ?

Sat Apr 02, 2016 1:02 am

i have Rb2011 and two switches and 11 AP , wireless network, to share internet , and I suffer from the problem of theft of Mac address in networks by scan ip software which caused the separation in Access Point devices, I tried a lot search for a solution, and I can not find any solution so far, so that MikroTik company did not try to put a general topic To resolve this problem. why why why ???

all networks in my city that depends Mikrotik Rbs have the same problem, and 5 months ago and i suffer from this problem.

i want Mikrotik to give me solution plzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz ?


i am waiting for reply from MikroTik company
 
User avatar
ShayanFiroozi
Member Candidate
Member Candidate
Posts: 284
Joined: Sat Jun 01, 2013 12:44 pm
Location: Bandar Abbas , Iran

Re: Plz MikroTik , give me solution for netcut and theft of Mac address ?

Sat Apr 02, 2016 9:28 am

Hi,
would you explain more please , what exactly the theft of Mac address is ?
The price of your knowledge which you have to pay is to share it with others !!
 
kiaunel
Member Candidate
Member Candidate
Posts: 211
Joined: Mon Jul 21, 2014 7:59 pm
Location: Romania

Sat Apr 02, 2016 9:40 am

How is your wireless network? Open or encrypted? Who is cloning macs? You can use pppoe , this will force your users to connect with an username and a password and cloning macs will be pointless. Mikrotik has nothing to do with your problem.

Sent from my Lenovo K50a40 using Tapatalk
 
hi4ibb
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 97
Joined: Mon Jan 18, 2016 4:36 pm

Re: Plz MikroTik , give me solution for netcut and theft of Mac address ?

Sat Apr 02, 2016 8:56 pm

Hi,
would you explain more please , what exactly the theft of Mac address is ?


my network is public . i mean i am sharing internet by using hotspot server, login page with username and password , that means AP is without encryption and clients have ip scan software that make scanning for my network and find Mac of people and steal their mac , do you understand me ?
 
hi4ibb
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 97
Joined: Mon Jan 18, 2016 4:36 pm

Re:

Sat Apr 02, 2016 8:57 pm

How is your wireless network? Open or encrypted? Who is cloning macs? You can use pppoe , this will force your users to connect with an username and a password and cloning macs will be pointless. Mikrotik has nothing to do with your problem.

Sent from my Lenovo K50a40 using Tapatalk

my network is public . i mean i am sharing internet by using hotspot server, login page with username and password , that means AP is without encryption and clients have ip scan software that make scanning for my network and find Mac of people and steal their mac , do you understand me ?
 
User avatar
ShayanFiroozi
Member Candidate
Member Candidate
Posts: 284
Joined: Sat Jun 01, 2013 12:44 pm
Location: Bandar Abbas , Iran

Re: Plz MikroTik , give me solution for netcut and theft of Mac address ?

Sat Apr 02, 2016 10:04 pm

You should add some firewall rules ,
Besides you should not allow client to communicate with each other
The price of your knowledge which you have to pay is to share it with others !!
 
hi4ibb
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 97
Joined: Mon Jan 18, 2016 4:36 pm

Re: Plz MikroTik , give me solution for netcut and theft of Mac address ?

Sat Apr 02, 2016 11:40 pm

You should add some firewall rules ,
Besides you should not allow client to communicate with each other

how i can do that plz ?
 
kiaunel
Member Candidate
Member Candidate
Posts: 211
Joined: Mon Jul 21, 2014 7:59 pm
Location: Romania

Re: Plz MikroTik , give me solution for netcut and theft of Mac address ?

Sun Apr 03, 2016 7:08 am

1. Set "default-forwarding=no" on your wireless interface...
2. Set arp=reply-only on the interface your customers are connecting to.

3. Set add-arp=yes for the DHCP-Server.

With these three settings, your router will ignore any client who had not obtained an IP address from the DHCP server.
 
User avatar
ShayanFiroozi
Member Candidate
Member Candidate
Posts: 284
Joined: Sat Jun 01, 2013 12:44 pm
Location: Bandar Abbas , Iran

Re: Plz MikroTik , give me solution for netcut and theft of Mac address ?

Sun Apr 03, 2016 9:23 am

@hi4ibb use settings recommended by kiaunel
The price of your knowledge which you have to pay is to share it with others !!
 
hi4ibb
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 97
Joined: Mon Jan 18, 2016 4:36 pm

Re: Plz MikroTik , give me solution for netcut and theft of Mac address ?

Sun Apr 03, 2016 8:37 pm

1. Set "default-forwarding=no" on your wireless interface...
2. Set arp=reply-only on the interface your customers are connecting to.

3. Set add-arp=yes for the DHCP-Server.

With these three settings, your router will ignore any client who had not obtained an IP address from the DHCP server.

thank you Kiaunel, i will do it and see

much thanks
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24317
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Plz MikroTik , give me solution for netcut and theft of Mac address ?

Mon Apr 04, 2016 10:32 am

If your network is public and open, by definition, you are allowing anyone to do anything.

If you want to protect your network, it can't be public and open. To protect against MAC theft, you need WPA2 and Hotspot with central RADIUS management.
No answer to your question? How to write posts

Who is online

Users browsing this forum: No registered users and 15 guests