Community discussions

 
MikroTikFan
Member Candidate
Member Candidate
Topic Author
Posts: 196
Joined: Sat Aug 02, 2014 1:13 am

Hoiw to limit access to webfig /graphs

Mon Jul 11, 2016 10:43 am

I need a help how to limit access to my graphs shared through webfig service
When I share access to my router before login I can see my graphics stats.
Is there any way to limit this information after login or switch off ?
 
User avatar
amt
Long time Member
Long time Member
Posts: 526
Joined: Fri Jan 16, 2015 2:05 pm

Re: Hoiw to limit access to webfig /graphs

Mon Jul 11, 2016 1:28 pm

change mikrotik web port and block it to outside or create firewall rule and give acsses only special addresses to accses....
 
efaden
Forum Guru
Forum Guru
Posts: 1711
Joined: Sat Mar 30, 2013 1:55 am
Location: New York, USA

Re: Hoiw to limit access to webfig /graphs

Mon Jul 11, 2016 2:42 pm

I need a help how to limit access to my graphs shared through webfig service
When I share access to my router before login I can see my graphics stats.
Is there any way to limit this information after login or switch off ?
No.  You can't do anything but restrict access to the interface or change the port.
 
User avatar
ZeroByte
Forum Guru
Forum Guru
Posts: 4051
Joined: Wed May 11, 2011 6:08 pm

Re: Hoiw to limit access to webfig /graphs

Mon Jul 11, 2016 7:50 pm

You can specify one (and apparently only one) IP range that's allowed access to the graphs on your interface rules / queue rules / resource rules

That's the only granularity available to you as far as "allow webfig / deny graphs" capability.
When given a spoon,
you should not cling to your fork.
The soup will get cold.
 
MikroTikFan
Member Candidate
Member Candidate
Topic Author
Posts: 196
Joined: Sat Aug 02, 2014 1:13 am

Re: Hoiw to limit access to webfig /graphs

Fri Jul 29, 2016 1:18 am

Thanks for all advice's. 
I know that I can give different port to whole webfig and different for winbox app.

To be sure if I understand right webfig separation - is this possible to separate webfig access from webfig access/graphs on different ports ?
 
efaden
Forum Guru
Forum Guru
Posts: 1711
Joined: Sat Mar 30, 2013 1:55 am
Location: New York, USA

Re: Hoiw to limit access to webfig /graphs

Fri Jul 29, 2016 3:30 am

Thanks for all advice's. 
I know that I can give different port to whole webfig and different for winbox app.

To be sure if I understand right webfig separation - is this possible to separate webfig access from webfig access/graphs on different ports ?
No.
 
User avatar
cdiedrich
Forum Veteran
Forum Veteran
Posts: 927
Joined: Thu Feb 13, 2014 2:03 pm
Location: Basel, Switzerland // Bremen, Germany
Contact:

Re: Hoiw to limit access to webfig /graphs

Fri Jul 29, 2016 11:24 am

You can do it with the built-in web proxy.
Enable the web proxy, redirect inbound tcp/80 connections to it and set access restrictions (for denying/granting access to graphs, use the path /graphs/) in the proxy.
This can be done for literally any address ranges.
Just tested it here and it works. When accessing http://<router-address>/graphs you get a decent "Access Denied" message.

-Chris
Christopher Diedrich
MTCNA, MTCUME, MTCWE
Basel, Switzerland
Bremen, Germany

There are 10 types of people: Those who understand binary and those who don't.
There are two types of people: Those who can extrapolate from incomplete data

Who is online

Users browsing this forum: No registered users and 29 guests