Community discussions

MikroTik App
 
sarpkaya
Member Candidate
Member Candidate
Topic Author
Posts: 208
Joined: Sun Mar 09, 2008 9:00 am

How can I disable Static IPs

Thu Jun 19, 2008 2:21 am

Hi, I don't want anybody to get an Static IP. I mean when somebody doesn't connect to DHCP server and writes what he want to use about that IP on Static IP box, I don't want them to connect anywhere. How can I do it?
 
User avatar
balimore
Forum Veteran
Forum Veteran
Posts: 884
Joined: Mon Apr 10, 2006 3:38 am

Re: How can I disable Static IPs

Thu Jun 19, 2008 2:39 am

----
Hai,

Yup. . . . . set your local or Public Interfaces to ARP=REPLY-ONLY and don't forget will registration Mac-Address client on ARP table.
that is basic security, i think . . . :wink:
any client must permission first to routerOS administrator incomming or outgoing for.

regards
Hasbullah.com
----
 
sarpkaya
Member Candidate
Member Candidate
Topic Author
Posts: 208
Joined: Sun Mar 09, 2008 9:00 am

Re: How can I disable Static IPs

Thu Jun 19, 2008 2:57 am

----
Hai,

Yup. . . . . set your local or Public Interfaces to ARP=REPLY-ONLY and don't forget will registration Mac-Address client on ARP table.
that is basic security, i think . . . :wink:
any client must permission first to routerOS administrator incomming or outgoing for.

regards
Hasbullah.com
----

But Its gonna be hotspot I cannot guess clients mac address.
 
User avatar
balimore
Forum Veteran
Forum Veteran
Posts: 884
Joined: Mon Apr 10, 2006 3:38 am

Re: How can I disable Static IPs

Thu Jun 19, 2008 3:04 am

----
Hai again,

you can do hotspot with dynamical address and mac address too, if you need without crossing addresses.. . . . nice
I love hotspot, it's more securely. cos behind it will unreachable if without aunthenticated.

regards
hasbullah.com
----
 
sarpkaya
Member Candidate
Member Candidate
Topic Author
Posts: 208
Joined: Sun Mar 09, 2008 9:00 am

Re: How can I disable Static IPs

Thu Jun 19, 2008 3:34 am

So, I still should write ARP=REPLY-ONLY ? But I wont add MACs to ARP. Right?
 
sarpkaya
Member Candidate
Member Candidate
Topic Author
Posts: 208
Joined: Sun Mar 09, 2008 9:00 am

Re: How can I disable Static IPs

Thu Jun 19, 2008 11:39 am

/set ether2-clients ARP=REPLY-ONLY
bad argument name ether2-clients (line 1 column 6)
or
interface set ether2-clients ARP=REPLY-ONLY
expected end of command (line 1 column 30)

Oh I forgot something which is big or small letter is a "deal" in linux based system so I wrote:
[admin@MikroTik] >> interface ethernet set ether2-clients arp=reply-only
and its okay.
 
sarpkaya
Member Candidate
Member Candidate
Topic Author
Posts: 208
Joined: Sun Mar 09, 2008 9:00 am

Re: How can I disable Static IPs

Thu Jun 19, 2008 11:55 am

hi, now nobody can connect internet. Because I should add their addresses but I don't know that customer's addresses, and I am not a fortuneteller or something like that so I cannot guess as well.
 
User avatar
balimore
Forum Veteran
Forum Veteran
Posts: 884
Joined: Mon Apr 10, 2006 3:38 am

Re: How can I disable Static IPs

Thu Jun 19, 2008 1:12 pm

-----
Hello Fren,

Oh. . . . . my god. :shock:
first post i wrote this, and why you have problem.
that's basic level security. . . .

You need serial null modem cable to do undo, when you are using routerboard.

regards
Hasbullah.com
------
----
Hai,

Yup. . . . . set your local or Public Interfaces to ARP=REPLY-ONLY and don't forget will registration Mac-Address client on ARP table.
that is basic security, i think . . . :wink:
any client must permission first to routerOS administrator incomming or outgoing for.

regards
Hasbullah.com
----
 
sarpkaya
Member Candidate
Member Candidate
Topic Author
Posts: 208
Joined: Sun Mar 09, 2008 9:00 am

Re: How can I disable Static IPs

Thu Jun 19, 2008 1:45 pm

-----
Hello Fren,

Oh. . . . . my god. :shock:
first post i wrote this, and why you have problem.
that's basic level security. . . .

You need serial null modem cable to do undo, when you are using routerboard.

regards
Hasbullah.com
------
----
Hai,

Yup. . . . . set your local or Public Interfaces to ARP=REPLY-ONLY and don't forget will registration Mac-Address client on ARP table.
that is basic security, i think . . . :wink:
any client must permission first to routerOS administrator incomming or outgoing for.

regards
Hasbullah.com
----

hi, the thing is not that. To make it undo just I need to write 'arp=enabled'.When I do it like that, everybody can use static IP. I don't want anybody to use Static IP and I don't know their MAC addresses, So I cannot do that right? So everybody can get whatever they want to use that IP and they may block other people's IP addresses too.
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8709
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: How can I disable Static IPs

Fri Jun 20, 2008 12:40 am

hmmm... maybe DHCP Server -> Add Static ARP Leases ?
 
sarpkaya
Member Candidate
Member Candidate
Topic Author
Posts: 208
Joined: Sun Mar 09, 2008 9:00 am

Re: How can I disable Static IPs

Fri Jun 20, 2008 7:01 pm

hmmm... maybe DHCP Server -> Add Static ARP Leases ?
that worked, thnx.

Who is online

Users browsing this forum: Bing [Bot] and 121 guests