For accesing internet from my home im using cisco router trat is configured to work like modem, pass all trafic to my mikrotik router. Cable router/modem have dynamic wan addres and static ip 192.168.1.1. Mikrotik router have wan address 192.168.1.2 and lan is 192.168.10.1 , enabled dhcp in range 192.168.10.100-192.168.10.200.
problem:
---------------------------------------
1. I can sucessfuly access to cisco modem entering 192.168.1.1 in browser and make cnange to them
questions:
------------------------------------------
1. How can i disable posibility to acces to MTK router wan subnet from my pc that is on address: 192.168.10.100 ?
Re: How to disable LAN connections to go to WAN
By using a firewall filter rule.
Rationale:
forward chain is the one for traffic traversing the router.
Traffic will be dropped if these three criteria are met:
- out interface is the one facing your cisco router, the WAN one.
- the source address trying to connect is not yours (can use an address list for this too, if you wan to access from more than one computer)
- destination address is cisco router ip.
Code: Select all
/ip firewall filter
add chain=forward action=drop out-interface=WAN src-address=!your.pc.lan.ip dst-address=192.168.1.1
forward chain is the one for traffic traversing the router.
Traffic will be dropped if these three criteria are met:
- out interface is the one facing your cisco router, the WAN one.
- the source address trying to connect is not yours (can use an address list for this too, if you wan to access from more than one computer)
- destination address is cisco router ip.
Who is online
Users browsing this forum: almdandi, blazer4493, megabytenet, naazh, Peixeiro, TheColdy and 37 guests