What is the significance of the following lines. It was there by default from ROS configured as dual-band home AP.


I started a new config from zero, I did not put those lines in and so far everything seems to work. What are they for?

"discover" list is by default used to specify interfaces on which neighbour discovery works.
"mactel" list of interfaces from which mac-telnet server is availible.
"mac-winbox" the same for accessing the router by mac address in winbox.

If I remember correctly, on blank config all of this is allowed on all static interfaces, which is not very good for security.
This behaviour can be changed in /ip neighbor discovery-settings and /tool mac-server
But I strongly advise to have neighbour discovery and mac-winbox configured at least for one of the LAN ports - to have an emergency access to the router on L2 in case you somehow lock yourself up on L3.

1. If I remember correctly, on blank config all of this is allowed on all static interfaces, which is not very good for security.

2. But I strongly advise to have neighbour discovery and mac-winbox configured at least for one of the LAN ports - to have an emergency access to the router on L2 in case you somehow lock yourself up on L3.

1. Yes I have none of those and I can access via winbox.

2. Good tip thanks