Page 1 of 1

Cut down user

Posted: Sat Jul 07, 2007 10:06 am
by elkolo23
i have a problem several times,,one user keeps changing his ip addres to one i have not assigned... i need a way to end this.(no ppoe) i use static
i think there is a way that only hte ips i `pprove will be surfing no matter if he changes ip to a valid one, he will not surf..

also a way to cut the user off if he has not paid the bill than just shut him down..


thanks for your help.

Re: Cut down user

Posted: Sun Jul 08, 2007 1:44 am
by airstream
You really should consider implementing pppoe or some other auth protocol. This gives you total control over your clients connections they will not be able to specify thier own IP etc. ROS supports many different types, and my flavor of choice for auth of a client is pppoe which is layerless (almost) .

And to really get into controlling your customer base try the "Usermanager" package, is all you need to control ppp auth and your customers.

Re: Cut down user

Posted: Sun Jul 08, 2007 1:23 pm
by GWISA
I agree with Airstream, but you could also try to use the Firewall filter with the client's IP address you have assigned as well as the MAC address of their authorised device.
This is a messy workaround and will only allow a specific machine with a specific IP address through the firewall.

Re: Cut down user

Posted: Sun Jul 08, 2007 1:55 pm
by sergejs
Static ARP could help you, when IP address is assigned to specific MAC-address, however it is helpful only when user is not changing MAC-address.

Re: Cut down user

Posted: Sun Jul 08, 2007 3:02 pm
by Equis
I would drop him as a customer....

For me tho, all my cpe's are router with nat, so only I can assign IP.


:-)

Re: Cut down user

Posted: Mon Jul 09, 2007 8:11 am
by balimore
----
yes,
don't forget have to set arp=reply-only interface for.
good luck.

regards
Hasbullah.com
----
Static ARP could help you, when IP address is assigned to specific MAC-address, however it is helpful only when user is not changing MAC-address.

Re: Cut down user

Posted: Fri Jul 13, 2007 9:33 am
by elkolo23
equi would you post an example?

Re: Cut down user

Posted: Fri Jul 13, 2007 10:36 am
by sergejs
IP traffic is filter in firewall, traffic that somehow appears at the router, firewall configuration examples,
http://wiki.mikrotik.com/wiki/Firewall