Hi ALL !
Is it possible to control IP-MAC records ?
Is it possible to close ALL connections for user who changed IP ?
Is it possible to log it ?
thx
yes, it works.
if somebody with wrong IP address regarding to MAC (entries in ARP table) tries to connect trough the Router, he(she, any other) can not.
One way, how to catch to configure firewall rules, which restrict connections by mac and IP, then log and drop others.
See information in the logs.
Configuration with ARP table works faster.
if somebody with wrong IP address regarding to MAC (entries in ARP table) tries to connect trough the Router, he(she, any other) can not.
One way, how to catch to configure firewall rules, which restrict connections by mac and IP, then log and drop others.
See information in the logs.
Configuration with ARP table works faster.
yep it works
for ip changes log you can use something like:
but this code don't log mac changes
for log mac changes, i guess this should help:
syntax for routeros version 2.8
p.s. sergejs is too fast for me ;)
for ip changes log you can use something like:
Code: Select all
/ip firewall rule forward
add src-address=!x.x.x.x/32 src-mac-address=xx:xx:xx:xx:xx:xx action=drop log=yes
for log mac changes, i guess this should help:
Code: Select all
/ip firewall rule forward
add src-address=x.x.x.x/32 src-mac-address=!xx:xx:xx:xx:xx:xx action=drop log=yes
syntax for routeros version 2.8
p.s. sergejs is too fast for me ;)
It is recommendable to use ARP.
If you want to use firewall and loggind rules, than 2.9 version has some changes.
To log and execute some action, you will need two rules,
one logging rule, and than action rule after it.
If you have problems with security in your network, may be try to configure HotSpot ?
If you want to use firewall and loggind rules, than 2.9 version has some changes.
To log and execute some action, you will need two rules,
one logging rule, and than action rule after it.
If you have problems with security in your network, may be try to configure HotSpot ?
Last edited by sergejs on Mon Sep 19, 2005 10:52 am, edited 1 time in total.
Who is online
Users browsing this forum: LearningLinux and 73 guests