I have couple of RB250GS routers with firmware 1.2.

I want to disable access to web interface of the switch from ports 1-4 and allow access only from port number 5.
I tried to do ACL with MAC of the switch as destination MAC but without success (Screenshot and config in attach). Switches web interface is still accessible through all ports.

It seems that ACL dont work on switch mac. Example from documentation (http://wiki.mikrotik.com/wiki/File:Swos_acl_example.png) dont work also.

Any ideas?

The behavior of ACL has been changed in v1.2 - ACL are no longer affecting traffic going-to or coming-from the CPU of the switch. It is best to use Allow From feature in System tab to restrict access to the switch. Sorry for inconvenience it might caused.

Hello,
I'm wondering is there a way to add more than one network in Allow From?
Or any other way to permit access from two networks and deny from 0.0.0.0/0

thx