MikroTik

Posted: **Thu Jul 02, 2020 1:20 pm**

I'm looking to create a user that can only login via the serial interface. (console port) I thought about setting its allowed address to 0.0.0.0/32. That should at least prohibit any IP connection attemps, right? Would this still allow MAC connections? We'll probably disable that, so that's fine.

Is there a better way to do this? I looked at the special login feature, but I couldn't see that it could be used for this purpose.

Posted: **Sat Jul 04, 2020 6:22 pm**

I'm looking to create a user that can only login via the serial interface. (console port) I thought about setting its allowed address to 0.0.0.0/32. That should at least prohibit any IP connection attemps, right? Would this still allow MAC connections? We'll probably disable that, so that's fine.

Is there a better way to do this? I looked at the special login feature, but I couldn't see that it could be used for this purpose.

Create a restricted local user-group and assign that user to that user-group. Ie. a "local" group, without web, ssh, telnet, winbox, api, etc.,
See System / User in GUI.

Posted: **Mon Jul 06, 2020 9:42 am**

Thanks!

MikroTik

User restricted to serial login

User restricted to serial login

Re: User restricted to serial login

Re: User restricted to serial login