Community discussions

MUM Europe 2020
 
elkolo23
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 69
Joined: Mon May 28, 2007 9:30 pm

Cut down user

Sat Jul 07, 2007 10:06 am

i have a problem several times,,one user keeps changing his ip addres to one i have not assigned... i need a way to end this.(no ppoe) i use static
i think there is a way that only hte ips i `pprove will be surfing no matter if he changes ip to a valid one, he will not surf..

also a way to cut the user off if he has not paid the bill than just shut him down..


thanks for your help.
 
User avatar
airstream
Member Candidate
Member Candidate
Posts: 188
Joined: Fri Feb 03, 2006 6:33 am
Location: New Zealand

Re: Cut down user

Sun Jul 08, 2007 1:44 am

You really should consider implementing pppoe or some other auth protocol. This gives you total control over your clients connections they will not be able to specify thier own IP etc. ROS supports many different types, and my flavor of choice for auth of a client is pppoe which is layerless (almost) .

And to really get into controlling your customer base try the "Usermanager" package, is all you need to control ppp auth and your customers.
 
User avatar
GWISA
Member
Member
Posts: 394
Joined: Tue Jan 31, 2006 2:37 pm
Location: Johannesburg, South Africa

Re: Cut down user

Sun Jul 08, 2007 1:23 pm

I agree with Airstream, but you could also try to use the Firewall filter with the client's IP address you have assigned as well as the MAC address of their authorised device.
This is a messy workaround and will only allow a specific machine with a specific IP address through the firewall.
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6621
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Re: Cut down user

Sun Jul 08, 2007 1:55 pm

Static ARP could help you, when IP address is assigned to specific MAC-address, however it is helpful only when user is not changing MAC-address.
 
User avatar
Equis
Forum Veteran
Forum Veteran
Posts: 888
Joined: Mon Jun 06, 2005 6:48 am

Re: Cut down user

Sun Jul 08, 2007 3:02 pm

I would drop him as a customer....

For me tho, all my cpe's are router with nat, so only I can assign IP.


:-)
 
User avatar
balimore
Forum Veteran
Forum Veteran
Posts: 892
Joined: Mon Apr 10, 2006 3:38 am

Re: Cut down user

Mon Jul 09, 2007 8:11 am

----
yes,
don't forget have to set arp=reply-only interface for.
good luck.

regards
Hasbullah.com
----
Static ARP could help you, when IP address is assigned to specific MAC-address, however it is helpful only when user is not changing MAC-address.
 
elkolo23
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 69
Joined: Mon May 28, 2007 9:30 pm

Re: Cut down user

Fri Jul 13, 2007 9:33 am

equi would you post an example?
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6621
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Re: Cut down user

Fri Jul 13, 2007 10:36 am

IP traffic is filter in firewall, traffic that somehow appears at the router, firewall configuration examples,
http://wiki.mikrotik.com/wiki/Firewall

Who is online

Users browsing this forum: alanp32, darkringfire, jirtux, jstepnicka, MSN [Bot], s17 and 142 guests