Block Traffic from LAN side
Posted: Thu Sep 26, 2019 8:08 am
by mshahid85
Hi,
i am using Mikrotik hex Lite router, i do not want to enable DHCP, my DHCP is off, i just want to block access from LAN side, let me explain,
suppose my lan ip is 192.168.1. 1, now everyone can configure static ip with their own effort and configured an ip from 192.168.1.1 to 254.. i cant block it, i have set ip 192.168.1.20 for a pc and set bandwidth limits, now when he will change ip 20 to 19 then my bandwidth limitation will not work.
So please tell me how to stop this, i want to set limitation on MAC IDs, but i have no idea how to do it, is there anyone who can help me?? please!!!!
Regards,,,
Shahid
Re: Block Traffic from LAN side
Posted: Thu Sep 26, 2019 10:28 am
by Zacharias
You can add a static arp entry for that MAC and IP adress. Also you have to set your Bridge arp to reply only.
From the wiki
https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge
"
reply-only - the interface will only reply to requests originated from matching IP address/MAC address combinations which are entered as static entries in the IP/ARP table. No dynamic entries will be automatically stored in the IP/ARP table. Therefore for communications to be successful, a valid static entry must already exist.
"
Re: Block Traffic from LAN side
Posted: Fri Sep 27, 2019 8:03 am
by mshahid85
You can add a static arp entry for that MAC and IP adress. Also you have to set your Bridge arp to reply only.
From the wiki
https://wiki.mikrotik.com/wiki/Manual:Interface/Bridge
"
reply-only - the interface will only reply to requests originated from matching IP address/MAC address combinations which are entered as static entries in the IP/ARP table. No dynamic entries will be automatically stored in the IP/ARP table. Therefore for communications to be successful, a valid static entry must already exist.
"
Thanks for your help, let me check this option
Re: Block Traffic from LAN side
Posted: Fri Sep 27, 2019 9:33 am
by Zacharias
Let me know if it works fine.
Re: Block Traffic from LAN side
Posted: Tue Oct 01, 2019 1:06 pm
by mshahid85
Let me know if it works fine.
i am new in mikrotik router so it will take time, if you know how to do it then please tell me because i require this on urgent basis,,,,
Thanks for your concern.....
Re: Block Traffic from LAN side
Posted: Tue Oct 08, 2019 1:26 pm
by mshahid85
Let me know if it works fine.
very sorry for late reply,
but your suggestion is working perfectly .......
thanks a lot for your support.........
Re: Block Traffic from LAN side
Posted: Tue Oct 08, 2019 3:43 pm
by Zacharias
You can mark post as solved...