Hello to all!

I have installed the Mikrotik v2.8 router to test it and I was very happy with it. Nonetheless, I have a couple problems:

1. How can I control access to the router in such a way that I create pairs of IP-MAC that can connect to the router? I need this in order to corectly survey the traffic generated by each computer on the network, and prevent the use of "illegal IPs". One can easily just change his machine's IP and make traffic.

2. Can I see the traffic generated by each computer on the LAN directly on the router. I know there is a windows software for remote access, but I need to see a kind of log created on the router.

Any help would be appreciated,
Bogdan

I need these function, too

OK, here we go.

1. You should set the interface's ARP mode to "reply-only" and then put static ARP entries for the IP-MAC-combos you want to allow. So as an example do:
"/interface ethernet set ether1 arp=reply-only"
"/ip arp add address=1.2.3.4 mac-address=00:10:DC:68:76:03 interface=ether1 comment=customerA"

2. You probably want to take a look at the torch utility ("/tool torch") - see the docs at http://www.mikrotik.com/docs/ros/2.8/tools/torch.main...

Christian,

Thank you for your answers. The first problem is solved then. The second one, though, not. As far as I understand, torch is a realtime traffic monitor, but not a counter. I want to see how much traffic an IP has made during the last week, or month for instance. The windows traffic counter utility does not show correct values, or maybe I don't know how to set it up :-).

Nice day,
Bogdan

Ooops, misunderstood you there. MikroTik can do IP accounting, which is described in the manual at http://www.mikrotik.com/docs/ros/2.8/guide/aaa.main under "Local IP Traffic Accounting".

You have to poll the data regularly out of the router, though, as you will loose data when the accouting table hits its' limits.

Eje Gustafsson (Macahan@fament.com) has written a script to do this and save the data into a database. I'm not sure, where the most current version is - I could send you version 1.1 he published on the mailing list in October 2002...

I would be very glad to have it. Can you please send it to me at bogdan_mare@web.de please?

I greatly appreciate your help.
Bogdan