ip neighbor/discovery-settings/set discover-interface-list=!all (??) ip service/disable (everything what you don't need) tool/mac-server/set allowed-interface-list=!all (??) and, of course, STRONG username and password combo Yup did all this (just configured service discovery for a VLAN interface o...

Yes, I control the pfsense box. The L3/4 is not an issue, I was thinking more MAC winbox access, discovery protocols and such. So the switch itself is the question. So from an attacker perspective I would go for the 'tik. So just the L2 stuff. I did all the stuff (that applies) from here . Looking f...

Hello ladies and gents, I have a MTK switch, routerOS 7.15 CRS312-4C. The switch is par of a home/office network with a single bridge and multiple VLANs sonfigured. Router on a stick is a pfsense box. I would like to now connect an untrusted network (central building switch) to it, and isolate this ...