Community discussions

MikroTik App
 
User avatar
larmaid
Member Candidate
Member Candidate
Topic Author
Posts: 177
Joined: Tue Aug 30, 2005 3:06 pm

[ask] bridging rule

Tue Jan 16, 2007 7:03 pm

any tutorial about bridging rule.....???
i like it
 
User avatar
larmaid
Member Candidate
Member Candidate
Topic Author
Posts: 177
Joined: Tue Aug 30, 2005 3:06 pm

Wed Jan 17, 2007 12:07 pm

weks.......anyone :cry:
i like it
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6624
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Wed Jan 17, 2007 1:46 pm

What kind of rules tutorial do you need ?
http://www.mikrotik.com/testdocs/ros/2. ... php#4.14.7
 
User avatar
larmaid
Member Candidate
Member Candidate
Topic Author
Posts: 177
Joined: Tue Aug 30, 2005 3:06 pm

Wed Jan 17, 2007 2:31 pm

wew finally....well i already read the bridge manual but that dont result anything........in bridge-filter does it same as firewall for bridging..??
i like it
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6624
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Wed Jan 17, 2007 2:40 pm

Bridge firewall implements filtering for data from to or trough bridge.
 
User avatar
larmaid
Member Candidate
Member Candidate
Topic Author
Posts: 177
Joined: Tue Aug 30, 2005 3:06 pm

Wed Jan 17, 2007 3:06 pm

is that mean the same as firewall in ip-firewall...??
i like it
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6624
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Wed Jan 17, 2007 3:08 pm

Yes.
 
User avatar
larmaid
Member Candidate
Member Candidate
Topic Author
Posts: 177
Joined: Tue Aug 30, 2005 3:06 pm

Wed Jan 17, 2007 3:20 pm

well i try a simple rule in bridge-filter but it didnt work...??
the rule is like this :

interface: in interface-lan1
out interface-lan2

IP : src.address-192.168.10.0/24
dst.address-10.10.15.0/24

Action : drop

lan1 & lan2 is in the same bridge
i like it
 
User avatar
larmaid
Member Candidate
Member Candidate
Topic Author
Posts: 177
Joined: Tue Aug 30, 2005 3:06 pm

Wed Jan 17, 2007 6:34 pm

can anyone help...pliss
i like it
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6624
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Thu Jan 18, 2007 8:41 am

Could you provide complete rule or export from 'interface bridge fiter' ?
 
User avatar
larmaid
Member Candidate
Member Candidate
Topic Author
Posts: 177
Joined: Tue Aug 30, 2005 3:06 pm

Mon Jan 22, 2007 6:02 am

interface-bridge-filter>add chain=forward in-interface=lan1 out-interface=lan2 src.address=192.168.10.0/24 dst.address=10.10.15.0/24 action=drop

note :
i got 4 ether and i bridge all

when i apply the rule the 192.168.10.0/24 still can connect to 10.10.15.0/24.....????
is something wrong with my rule.....if so please help......thx
i like it
 
User avatar
larmaid
Member Candidate
Member Candidate
Topic Author
Posts: 177
Joined: Tue Aug 30, 2005 3:06 pm

Tue Jan 23, 2007 6:20 am

hello.....need help pliss :(
i like it
 
sten
Forum Veteran
Forum Veteran
Posts: 920
Joined: Tue Jun 01, 2004 12:10 pm

Tue Jan 23, 2007 8:30 pm

to filter traffic going *through* your bridge (going from one interface to another) you need to add rules to "forward" chain.
The input/output chains are reserved for traffic going *TO* or *FROM* your bridge, as in winbox and routed traffic.
Move along. Nothing to see here.
 
User avatar
larmaid
Member Candidate
Member Candidate
Topic Author
Posts: 177
Joined: Tue Aug 30, 2005 3:06 pm

Mon Jan 29, 2007 6:24 pm

@sten can i delete the bridge (that connected all the ether) and set all the 4 ether with specified ip....with the same subnet..and i want all the 4 ether are connected?? i've try this one but all the 4 ether cannt connected!!!
i like it
 
sten
Forum Veteran
Forum Veteran
Posts: 920
Joined: Tue Jun 01, 2004 12:10 pm

Tue Jan 30, 2007 12:58 am

what's your configuration?
and what do you want to achieve?
Move along. Nothing to see here.
 
User avatar
sky_16
just joined
Posts: 20
Joined: Wed Nov 15, 2006 4:36 am

Tue Jan 30, 2007 5:43 am

:D
 
User avatar
larmaid
Member Candidate
Member Candidate
Topic Author
Posts: 177
Joined: Tue Aug 30, 2005 3:06 pm

Tue Jan 30, 2007 6:57 pm

okay heres my configuration that i want to achive:

ether 1 - with ip = 10.10.1.1/255.255.0.0 (local) (reply only)
ether 2 - with ip = 10.10.2.1/255.255.0.0 (local)
ether 3 - with ip = 10.10.3.1/255.255.0.0 (local)
ether 4 - with ip = 202.165.x.x (global)

what i want to is all ether can connect each other without to creat a bridge.....!!!!!

thx
i like it
 
User avatar
tneumann
Member
Member
Posts: 394
Joined: Sat Apr 16, 2005 6:38 pm
Location: Germany

Tue Jan 30, 2007 7:33 pm

ether 1 - with ip = 10.10.1.1/255.255.0.0 (local) (reply only)
ether 2 - with ip = 10.10.2.1/255.255.0.0 (local)
ether 3 - with ip = 10.10.3.1/255.255.0.0 (local)
Address overlap... they're all 10.10/16
what i want to is all ether can connect each other without to creat a bridge.....!!!!!
Well, if you do not create a bridge, then you'd have to route... but you can't because your network address ranges overlap. Sounds like you're stuck and need to rethink your network design.

--Tom
 
User avatar
larmaid
Member Candidate
Member Candidate
Topic Author
Posts: 177
Joined: Tue Aug 30, 2005 3:06 pm

Wed Jan 31, 2007 1:43 am

so that means i need to bridge, right??
i like it
 
sten
Forum Veteran
Forum Veteran
Posts: 920
Joined: Tue Jun 01, 2004 12:10 pm

Wed Jan 31, 2007 8:28 pm

no

you have a fundamental flaw in your design

you need to apply correct subnet masks.

hint: correct subnet masks for the subnetting you chose is 255.255.255.0 but you need to find out how this affects your routing tables.
Move along. Nothing to see here.
 
User avatar
larmaid
Member Candidate
Member Candidate
Topic Author
Posts: 177
Joined: Tue Aug 30, 2005 3:06 pm

Sat Feb 03, 2007 7:43 pm

:( i need to change my subnet for each ether......
i like it
 
User avatar
sky_16
just joined
Posts: 20
Joined: Wed Nov 15, 2006 4:36 am

Mon Feb 05, 2007 3:06 pm

larmaid...it's ur job to re-design the network :D

Who is online

Users browsing this forum: jvanhambelgium, shiyiqiang08 and 72 guests