Community discussions

MikroTik App
 
User avatar
superrouter
newbie
Topic Author
Posts: 44
Joined: Wed Feb 23, 2005 12:35 pm
Location: ZA

how to block users on hotspot from seeing eachother?

Sat Oct 07, 2006 11:06 am

Hi, I have multiple rb 112 highsites connected through wds and authenticating using the hotspot sysem on a rb 500 board. My problem is that i do not know how to block users from accessing eachothers pc's on the network. Does anyone have any ideas which could help me out?
 
adaheem
Member Candidate
Member Candidate
Posts: 135
Joined: Sat Aug 26, 2006 12:33 am

Sun Oct 08, 2006 4:49 am

use Linksys WRT54 as an AP ,it has an isolation option.
 
User avatar
savagedavid
Trainer
Trainer
Posts: 320
Joined: Thu Aug 25, 2005 12:58 pm
Location: Cape Town, South Africa
Contact:

Sun Oct 08, 2006 10:10 am

use Linksys WRT54 as an AP ,it has an isolation option.
You are kidding right?

On your RB you can turn off default forwarding to stop clients on the same AP seeing each other. You can also use the firewall to block ports 135 and 443-445 to stop NETBIOS communication between PC's on different routers. Do you just want to stop users from seeing each others computers in Network Neighbourhood? This will do the trick in that case.
 
jo2jo
Forum Guru
Forum Guru
Posts: 1007
Joined: Fri May 26, 2006 1:25 am

Sun Oct 08, 2006 10:39 am

adaheem is right...if you use link$y$ wrt54 ur users will have bigger problems than seeing each other, so the issue will then be "isolated".

jk, the post above this has the right answer

:)
 
User avatar
balimore
Forum Veteran
Forum Veteran
Posts: 884
Joined: Mon Apr 10, 2006 3:38 am

Sun Oct 08, 2006 10:45 am

---
i drunk some coffee to make more understand of MT's manuals

:lol: :lol: .....no comment...

Hasbullah.com
---
 
User avatar
superrouter
newbie
Topic Author
Posts: 44
Joined: Wed Feb 23, 2005 12:35 pm
Location: ZA

no kidding ! ;)

Sun Oct 08, 2006 3:21 pm

So even if i have multiple rb ap's linking together via wds turning off default forwarding will work?
 
hroubaix
just joined
Posts: 10
Joined: Thu Aug 17, 2006 3:45 pm

Mon Oct 09, 2006 12:35 pm

You are kidding right?

On your RB you can turn off default forwarding to stop clients on the same AP seeing each other. You can also use the firewall to block ports 135 and 443-445 to stop NETBIOS communication between PC's on different routers. Do you just want to stop users from seeing each others computers in Network Neighbourhood? This will do the trick in that case.
Please correct me if I’m wrong.

Won't you create the hidden node problem by turning Default forwarding off?
So if you have a small network, 10 - 20 users this should work ok, but for larger networks this could cause some problems in peak times.

Regarding the firewall option.
It will work to block the above mentioned ports, between routers, but not for users connected to the same AP.

I would also like to know an answer to this as I'm experiencing the same problem. I know about nstream, but it won't work for my environment.

Is pppoe an answer (point to point links)?
 
User avatar
GWISA
Member
Member
Posts: 389
Joined: Tue Jan 31, 2006 2:37 pm
Location: Johannesburg, South Africa

Tue Oct 10, 2006 10:27 am

Won't you create the hidden node problem by turning Default forwarding off?


I fail to see how? Hidden node is purely RF/802.11 related, whereas 'default forwarding' is exactly like the Linksys 'isolation' option - just blocking access between clients connected to the same AP...
 
User avatar
HarvSki
Member
Member
Posts: 395
Joined: Fri May 28, 2004 3:37 pm
Location: London, UK

Tue Oct 10, 2006 4:33 pm

Yes Link$y$ wonderful choice, not ;)

Switch off default forward. Hidden node is an RF problem due to 802.11 use of CDMA which can be helped by lowering the RTS/CTS of the clients to <500 . Although this is not possible on a public hotspot

Who is online

Users browsing this forum: CGGXANNX, MiniMeCZ, phascogale, zxspectrum and 38 guests