Community discussions

MikroTik App
 
Chatterstatic
just joined
Topic Author
Posts: 19
Joined: Sat Feb 09, 2019 3:21 pm

Bridge Firewall block subnet/ip4

Fri Nov 12, 2021 1:42 pm

What is the most effective and least cpu intensive way to either block all ip4 traffic passing over a bridged group of interfaces? So only ipv6 traffic can pass I’m trying to overcome prefix delegation not working on my isp’s router I’m trying to setup a second device to act as a ipv6 gateway.
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11627
Joined: Thu Mar 03, 2016 10:23 pm

Re: Bridge Firewall block subnet/ip4

Fri Nov 12, 2021 5:03 pm

Use bridge filter (/interface bridge filter) to block frames with mac-protocol=ip . You may have to disable HW offload (bridge filtering is CPU-bound) or configure similar directly on switch chip is your device has capable switch chip.
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 12008
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: Bridge Firewall block subnet/ip4

Fri Nov 12, 2021 5:28 pm

Or for block all except ipv6: mac-protocol = ! ipv6
 
Chatterstatic
just joined
Topic Author
Posts: 19
Joined: Sat Feb 09, 2019 3:21 pm

Re: Bridge Firewall block subnet/ip4

Fri Nov 12, 2021 5:33 pm

Thanks I will give this go….

Who is online

Users browsing this forum: BobA, jaclaz and 78 guests