Code: Select all
/ip vrf
add interfaces=guest name=vrf-guest
/ip address
add address=192.168.82.123/24 interface=guest
Code: Select all
/ip firewall mangle
add action=log chain=prerouting protocol=icmp
add action=log chain=input protocol=icmp
add action=log chain=output protocol=icmp
add action=log chain=postrouting protocol=icmp
Code: Select all
firewall,info prerouting: in:guest out:(unknown 0), src-mac xx:xx:xx:xx:xx:xx, proto ICMP (type 8, code 0), 192.168.82.1->192.168.82.123, len 50
firewall,info prerouting: in:(unknown 22) out:(unknown 0), src-mac xx:xx:xx:xx:xx:xx, proto ICMP (type 8, code 0), 192.168.82.1->192.168.82.123, len 50
firewall,info input: in:(unknown 22) out:(unknown 0), src-mac xx:xx:xx:xx:xx:xx, proto ICMP (type 8, code 0), 192.168.82.1->192.168.82.123, len 50
firewall,info output: in:(unknown 0) out:(unknown 22), proto ICMP (type 0, code 0), 192.168.82.123->192.168.82.1, len 50
firewall,info postrouting: in:(unknown 0) out:(unknown 22), proto ICMP (type 0, code 0), 192.168.82.123->192.168.82.1, len 50
firewall,info output: in:(unknown 0) out:guest, proto ICMP (type 0, code 0), 192.168.82.123->192.168.82.1, len 50
firewall,info postrouting: in:(unknown 22) out:guest, proto ICMP (type 0, code 0), 192.168.82.123->192.168.82.1, len 50
Code: Select all
/ip firewall filter
add action=accept chain=input in-interface=guest log=yes log-prefix=allow protocol=icmp
add action=drop chain=input log=yes log-prefix=drop protocol=icmp
Code: Select all
firewall,info prerouting: in:guest out:(unknown 0), src-mac xx:xx:xx:xx:xx:xx, proto ICMP (type 8, code 0), 192.168.82.1->192.168.82.123, len 50
firewall,info prerouting: in:(unknown 22) out:(unknown 0), src-mac xx:xx:xx:xx:xx:xx, proto ICMP (type 8, code 0), 192.168.82.1->192.168.82.123, len 50
firewall,info input: in:(unknown 22) out:(unknown 0), src-mac xx:xx:xx:xx:xx:xx, proto ICMP (type 8, code 0), 192.168.82.1->192.168.82.123, len 50
firewall,info drop input: in:(unknown 22) out:(unknown 0), src-mac xx:xx:xx:xx:xx:xx, proto ICMP (type 8, code 0), 192.168.82.1->192.168.82.123, len 50