Page 1 of 1

RBcAPGi-5acD2nD disable LAN rules

Posted: Fri Oct 09, 2020 9:22 am
by yo3fuu3
Hi, I want to configure ether2 to be disable on certain days and hours, only wirelss to work. I tried in firewall, schedule works, but I have: in / out interface matcher not possible whwn interface (ether2) is slave-use master instead (bridge). I tried that too, but I don't have internet or wifi anymore.

Re: RBcAPGi-5acD2nD disable LAN rules

Posted: Fri Oct 09, 2020 11:04 am
by mkx
You can disable certain bridge port using command
/interface bridge port set [ find interface=ether2 ] disabled=yes
... or disabled=no to enable it again. Use that in a scheduled script ...

This completely disables bridge port, also for LAN traffic. If you want to disable only internet access for devices connected to that port ... then that's a bigger problem ... unless you know (LAN) IP addresses of those devices in which case you block access based on src-address ...

Re: RBcAPGi-5acD2nD disable LAN rules

Posted: Fri Oct 09, 2020 6:18 pm
by yo3fuu3
Thanks for the answer, I tried ether2 = bridge but it still doesn't accept firewall rule. Maybe you need another bridge and vlan. Yes, I don't know ip from lan and mac, it was easy to block, you need everything there to not work.