Hi Guys
Would it be possible to allow a setting for Winbox to timeout its connection to RouterOS after xxx mins etc.
Thanks
I'd like to add my vote to Chupaka's suggestion. This is a significant concern with MikroTik security since there is no way to force logout an active user. The list of active users can be printed, but there is nothing that can be done with these entries. Presumably, if we had this feature, then we could then create a script to log out any active user after a period of inactivity, though that would also require having some way to determine how long since the last entry from an active user.what about a feature to disconnect current logged users? =)
Any update on this? I have a router running v2.9.26 that shows several of the same user name active in the "Active Users" list. Now it appears Winbox will not open the router with this user name...it trys, but just flashes the winbox session open and closed very quickly.I'm also voting for one of these options:
1) Session idle timeout
- I got negative answer from MikroTik support about adding this feature at this moment
2) Remove active user session
- the same as option (1)
If you can determine their IP pop a Reject rule in the firewall perhaps?Any update on this? I have a router running v2.9.26 that shows several of the same user name active in the "Active Users" list. Now it appears Winbox will not open the router with this user name...it trys, but just flashes the winbox session open and closed very quickly.I'm also voting for one of these options:
1) Session idle timeout
- I got negative answer from MikroTik support about adding this feature at this moment
2) Remove active user session
- the same as option (1)
I can log in to the router using a different user name, but do not see any command to kick or remove these stale "Active Users". Any suggestion other than rebooting the router?
Thanks,
Brad
Thanks for the idea, but already tried it. These "Active User" sessions are not actually active to anywhere...just hung there still showing active when in fact they aren't.If you can determine their IP pop a Reject rule in the firewall perhaps?Any update on this? I have a router running v2.9.26 that shows several of the same user name active in the "Active Users" list. Now it appears Winbox will not open the router with this user name...it trys, but just flashes the winbox session open and closed very quickly.I'm also voting for one of these options:
1) Session idle timeout
- I got negative answer from MikroTik support about adding this feature at this moment
2) Remove active user session
- the same as option (1)
I can log in to the router using a different user name, but do not see any command to kick or remove these stale "Active Users". Any suggestion other than rebooting the router?
Thanks,
Brad
Not sure if you'd also need to drop their existing connections from the connection tracking table.
Care to share the command? Looking at a router running v5.14 and still don't see a way to kick an active user. Show me how to kick active user "0".then just upgrade - it was already fixed