Community discussions

MikroTik App
 
amirbilal
just joined
Topic Author
Posts: 1
Joined: Wed Jul 30, 2008 9:11 am

How to block MAC addresses..

Wed Jul 30, 2008 9:35 am

Hi All,

We have 70+ users in our company and we have DHCP enabled on our RouterOS. Now the problem is whenever someone brings a laptop and connect that laptop to any random network port that laptop is allowed to use maximum available bandwidth.

Is there anyway that I can make a list of allowed MAC address and add it to RouterOS; then any computer which later on connects to RouterOS and its MAC is not in the allowed list, it will not be able to use internet.

Please advise any solution for this.

Thank you so much for your time.

Best regards,
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8712
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: How to block MAC addresses..

Wed Jul 30, 2008 10:55 am

use 'read-only' arp on interface and 'add static ARP entry' in DHCP - then you may add all known MACs as static leases - all unknown devices will not work
 
mh7
just joined
Posts: 13
Joined: Fri Jul 11, 2008 6:13 pm
Location: Poland

Re: How to block MAC addresses..

Thu Jul 31, 2008 4:38 pm

'add static ARP entry'
..I think You would mean in IP / ARP List :)
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8712
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: How to block MAC addresses..

Thu Jul 31, 2008 6:34 pm

'add static ARP entry'
..I think You would mean in IP / ARP List :)
not in IP->ARP, but checkbox in DHCP Server
users with static IPs (not received via DHCP) will not be served by ROS
 
mh7
just joined
Posts: 13
Joined: Fri Jul 11, 2008 6:13 pm
Location: Poland

Re: How to block MAC addresses..

Fri Aug 01, 2008 1:51 am

'add static ARP entry'
..I think You would mean in IP / ARP List :)
not in IP->ARP, but checkbox in DHCP Server
users with static IPs (not received via DHCP) will not be served by ROS
If someone is added to arp list and using static ip on the computer will be served
 
User avatar
fatonk
Member
Member
Posts: 438
Joined: Tue Feb 22, 2005 11:06 am
Location: Mitrovica/Kosova

Re: How to block MAC addresses..

Fri Aug 01, 2008 10:13 am

Leave ip arp list intact, no entries should be added there, just under ip dhcp-server make static entries of leased IP addresses and all addresses that are statically configured won't be served, just these dhcp static entries.

regards

faton