guglpolitical.blogg.se

1. #MIKROTIK BLACKLIST MAC ADDRESS WIRELESS HOW TO#
2. #MIKROTIK BLACKLIST MAC ADDRESS WIRELESS FULL#
3. #MIKROTIK BLACKLIST MAC ADDRESS WIRELESS CODE#

Set band=2ghz-b/g/n channel-width=20/40mhz-XX \Ĭountry=slovakia disabled=no distance=indoors frequency=auto mode=\Īp-bridge name=wlan1 ssid=TPLTCom24 wireless-protocol=802.11 wps-mode=\ Thanks to everyone taking the time to help me as i am still learning.Ĭode: Select all # may/08/2022 19:12:48 by RouterOS 7.1.5Īdd band=2ghz-b/g/n extension-channel=XX name=2ghzĪdd band=5ghz-a/n/ac extension-channel=XXXXXXXX name=5ghzĪdd arp=enabled name=guest vlan-id=100 vlan-mode=use-tagĪdd admin-mac=2C:C8:1B:45:66:46 auto-mac=no comment=defconf name=bridge And the last minor one is that the router itself has no connection to internet, for that i need to enable ip/route/ that has 'main' routing table to for example check for updates, but then if route for 'main' routing table is enabled, something happens and there's no connection to entire network. Third major is that in my ip/routes/ i have check gateway for pppoe disabled because the remote end does not reply to icmp and arp, the check gateway thing was unchecked and after 2 minutes the route was 'unreachable'.Ĥ. (I'm allowing those pings from only 2 IPs that are added in firewall and it worked always before)ģ. If i was to guess i think it's something with router sending reply through different ISP from which did the original packet come.Ģ Second major is that external monitoring server that sends pings somehow works for ISP2 but not on ISP1 and could be relevant to first issue.

#MIKROTIK BLACKLIST MAC ADDRESS WIRELESS HOW TO#

First major is that my port forwading stopped working completely and i would like it to work with Hairpin NAT as well as i am confused how to adjust it for load balanced network.

#MIKROTIK BLACKLIST MAC ADDRESS WIRELESS FULL#

using_pcc/ tutorial that i am using right now as it is relatively stable and fast, however i am not hitting the full speed but close. I managed to get it to work after a day thanks to a. ll+Marking, however the closest method to working was example 3, PCC method, but that was unstable and it was loading websites really long for some reason.

#MIKROTIK BLACKLIST MAC ADDRESS WIRELESS CODE#

I can probly just change the code to create a "WhiteList" address list and apply above rules to accept.I got recently second ISP connection and i have been trying to setup load balancing + failover if one of them was to go offline.Ĭontext why i am writing on forum: I have no idea why did the reddit one work or why did port forwarding stopped working and hoped someone here could help me.įirst i went to mikrotik updated wiki for routeros 7. Now, is there also a way to create a whitelist for say for all admin devices such as pc, tablet, smartphone, etc etc. I was testing with my iphone, so how do i make it dynamic again? the menu says nothing to return to dynamic.įound out - deleted from the lease, went back to D Ticking block access will also deny its wifi access within the same LAN/Network but to make it quick, restart the router which i dont recommend. Making the user ip static, tick block access, add to blacklist, quickly catches the user ea time user starts to come back in, or by deleting user lease, it will catch the user. the firewall immediately catched the user! Tested this with mac address then ticked block address, works pretty good. I have done this many times to my customers. restart the router (or wait that static lease to expire) and the specific mac address will not get address from dhcp.īoth are working for me in my vmware test machine.

set a dynamic lease to static lease "make static".Ģ. When you block a mac address in firewall filter (forward and input chain) you block internet access and not dhcp lease.Īdd chain=input src-mac-address=aa:bb:cc:dd:ee:ff action=dropĪdd chain=forward src-mac-address=aa:bb:cc:dd:ee:ff action=dropġ.