Community discussions

 
mshahid85
just joined
Topic Author
Posts: 24
Joined: Thu Mar 01, 2018 12:19 pm

Block Traffic from LAN side

Thu Sep 26, 2019 8:08 am

Hi,

i am using Mikrotik hex Lite router, i do not want to enable DHCP, my DHCP is off, i just want to block access from LAN side, let me explain,
suppose my lan ip is 192.168.1. 1, now everyone can configure static ip with their own effort and configured an ip from 192.168.1.1 to 254.. i cant block it, i have set ip 192.168.1.20 for a pc and set bandwidth limits, now when he will change ip 20 to 19 then my bandwidth limitation will not work.

So please tell me how to stop this, i want to set limitation on MAC IDs, but i have no idea how to do it, is there anyone who can help me?? please!!!!

Regards,,,
Shahid
 
Zacharias
Member
Member
Posts: 420
Joined: Tue Dec 12, 2017 12:58 am
Location: Greece

Re: Block Traffic from LAN side

Thu Sep 26, 2019 10:28 am

You can add a static arp entry for that MAC and IP adress. Also you have to set your Bridge arp to reply only.
From the wiki https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge
"
reply-only - the interface will only reply to requests originated from matching IP address/MAC address combinations which are entered as static entries in the IP/ARP table. No dynamic entries will be automatically stored in the IP/ARP table. Therefore for communications to be successful, a valid static entry must already exist.

"
 
mshahid85
just joined
Topic Author
Posts: 24
Joined: Thu Mar 01, 2018 12:19 pm

Re: Block Traffic from LAN side

Fri Sep 27, 2019 8:03 am

You can add a static arp entry for that MAC and IP adress. Also you have to set your Bridge arp to reply only.
From the wiki https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge
"
reply-only - the interface will only reply to requests originated from matching IP address/MAC address combinations which are entered as static entries in the IP/ARP table. No dynamic entries will be automatically stored in the IP/ARP table. Therefore for communications to be successful, a valid static entry must already exist.

"
Thanks for your help, let me check this option
 
Zacharias
Member
Member
Posts: 420
Joined: Tue Dec 12, 2017 12:58 am
Location: Greece

Re: Block Traffic from LAN side

Fri Sep 27, 2019 9:33 am

Let me know if it works fine.
 
mshahid85
just joined
Topic Author
Posts: 24
Joined: Thu Mar 01, 2018 12:19 pm

Re: Block Traffic from LAN side

Tue Oct 01, 2019 1:06 pm

Let me know if it works fine.
i am new in mikrotik router so it will take time, if you know how to do it then please tell me because i require this on urgent basis,,,, :)

Thanks for your concern.....
 
mshahid85
just joined
Topic Author
Posts: 24
Joined: Thu Mar 01, 2018 12:19 pm

Re: Block Traffic from LAN side

Tue Oct 08, 2019 1:26 pm

Let me know if it works fine.
very sorry for late reply,
but your suggestion is working perfectly .......

thanks a lot for your support.........
 
Zacharias
Member
Member
Posts: 420
Joined: Tue Dec 12, 2017 12:58 am
Location: Greece

Re: Block Traffic from LAN side

Tue Oct 08, 2019 3:43 pm

You can mark post as solved...

Who is online

Users browsing this forum: No registered users and 6 guests