Hi,I have a high site running pc RouterOS v3.7.There is one guy that killing our connection speed on the high site with out permission.If we kick his mac address,then he just go and chenge his mac address and connect again.Is there a way there a way to kick this guy on his radio name or same how.

Please PM me,post or mail.

Pieter@pcit.co.za

Not enough information to help you. What hardware/software configuration are you using? PPPoE will correct this issue...

The high site have two sectors and no internet connection.The high site is being used to act as a local network connection in our town,where you can download software ect.,but the guy is using the high site and bring the every ones download speed down.If we kick him the average connection speed of the five people is the same,so we kick him on his mac address.After a few minutes he have change his mac address and connect again.So I want a way to kick this guy forever until he pay me to use the high site.

Is there a way?

Greetings!

Why throw him off? I install throttling on the wireless interface. Limit all client connections to 1M download speed or thereabouts on the public download "high" network connections, especially if they are free.

Otherwise, backwards may be the best bet. Set default-authentication=no and only allow connections from good client MACS with the access-list.

Otherwise, backwards may be the best bet. Set default-authentication=no and only allow connections from good client MACS with the access-list.

Can you tell me more about the backwards?

Is your network setup so anyone can access it or only certain people?

Backwards doesn't work on an unsecure pubicly accessible network....

unsecure network,is there a way to stop the guy

Not really, you would be better off throttling everyone using a PCQ queue

To me:
Normal is allow everyone and block a few bad MACs.
Backwards is block everyone and allow a few good MACs.

You can't use this effectively on a "public" network because nobody would be able to connect until you entered their MAC in the access-list.

Take a look at the docs under Interfaces Wireless Client and Access Point manual. The is a section on access-list. The default-authenticate setting is in the interface wireless settings.
default-authenticate=yes is all can connect.
default-authenticate=no is nobody can connect.

Then the access-list settings override the default settings. I just found that out myself.

I would really go with the client throttling. Limit all to a specific bandwidth. It will eliminate the problem with all clients, not just this guy.

Can you post how to set it up to block all the macs (good and bad) and then just allow the good macs.

I use CLI so you may need to translate into Winbox...

WARNING - If you use the wireless connection to access the setup, add your MAC to the access-list before setting the default-authentication so you don't get locked out.

/interface wireless access-list add mac-address=xx.xx.xx.xx.xx.xx interface=wlan1 (your mac)
/interface wireless set wlan1 default-authentication=no

Once these are done, then just add MACS to the list like the first line above. The entry adds "authentication=yes" in the access-list variables if you do not specify it in the entry. Check to be sure tho...

If wlan1 is not the AP interface, change to the correct interface.

Just so you know...if this guy is really good, he will packet-sniff your network and find a good mac, then you have the same problem in reverse, except with one of your other clients locked out because of a duplicate mac. I think they refer to this as "hijacking a connection".

ADD: You could install a hotspot on that interface. Even if he did spoof a good mac, he could not get through the interface without a username/password.

The high site have two sectors and no internet connection.The high site is being used to act as a local network connection in our town,where you can download software ect.,but the guy is using the high site and bring the every ones download speed down.If we kick him the average connection speed of the five people is the same,so we kick him on his mac address.After a few minutes he have change his mac address and connect again.So I want a way to kick this guy forever until he pay me to use the high site.

Is there a way?

hi

i have the exact problem...but i don't wont him to kick out...
i want do somehow to fix this...

how can somebody bring every ones download speed down??
the snr is normal...and everything else...and only when he downloads the download speed goes down....doesn't matter if there are connected 10 client's or only 1...

i have try'd to limit his connection to 1M but nothing...his downloading now 1M but the again goes the download speed...

is there somebody with the same problem??

tnx
by

Use hotspot feature.. It works for me.

I have setup a Radius server that handles known (good mac's) and logs them in automaticly throgh the hotspot server and everybody unknown get's the login page...

Regards

/Henrik

Use hotspot feature.. It works for me.

I have setup a Radius server that handles known (good mac's) and logs them in automaticly throgh the hotspot server and everybody unknown get's the login page...

Regards

/Henrik

ok tnx 4 replay..but i have now figured out why i have this problems...
some problems with my amd....mashine...now i have change the pc and all working now...

tnx
by