Split horizon on dynamic port

FezzFest · Sun Apr 03, 2016 12:33 pm

I would like to use bridge horizon on a dynamically added port (more specifically, a PPP connection) to prevent clients in the bridge from talking to each other.

However, I cannot find how to do this. Setting a horizon value directly doesn't work:

[admin@RouterOS] > /interface bridge port set 10 horizon=1
failure: can not change dynamic port

But I'm also unable to find horizon option in /ppp profile:

[admin@RouterOS] /ppp profile> set 0
address-list          comment              local-address    queue-type       use-encryption
bridge                dns-server           name             rate-limit       use-mpls      
bridge-path-cost      idle-timeout         only-one         remote-address   wins-server   
bridge-port-priority  incoming-filter      outgoing-filter  session-timeout  
change-tcp-mss        insert-queue-before  parent-queue     use-compression

Is it even possible to use bridge horizon on dynamic ports?

pukkita · Sun Apr 03, 2016 12:56 pm

Are we talking about a PPPoE server?

FezzFest · Sun Apr 03, 2016 1:01 pm

No, the PPP connections are PPTP clients who share the same subnet, but shouldn't be able to communicate with each other:

[admin@RouterOS] > /interface print
10 DRS <pptp-hotspot-1>               pptp-in          1596
11 DRS <pptp-hotspot-2>               pptp-in          1596
12 DRS <pptp-hotspot-3>               pptp-in          1596
13 DRS <pptp-hotspot-4>               pptp-in          1596
14  R  bridge-Hotspot                 bridge           1500 65535

We have about 300 of these <pptp-hotspot> clients, all of them are Mikrotik nodes.

pukkita · Sun Apr 03, 2016 1:24 pm

Seems you will need to resort to bridge filters then.

Split horizon on dynamic port

Split horizon on dynamic port

Re: Split horizon on dynamic port

Re: Split horizon on dynamic port

Re: Split horizon on dynamic port

Who is online