Page 1 of 1

How to block MAC addresses..

Posted: Wed Jul 30, 2008 9:35 am
by amirbilal
Hi All,

We have 70+ users in our company and we have DHCP enabled on our RouterOS. Now the problem is whenever someone brings a laptop and connect that laptop to any random network port that laptop is allowed to use maximum available bandwidth.

Is there anyway that I can make a list of allowed MAC address and add it to RouterOS; then any computer which later on connects to RouterOS and its MAC is not in the allowed list, it will not be able to use internet.

Please advise any solution for this.

Thank you so much for your time.

Best regards,

Re: How to block MAC addresses..

Posted: Wed Jul 30, 2008 10:55 am
by Chupaka
use 'read-only' arp on interface and 'add static ARP entry' in DHCP - then you may add all known MACs as static leases - all unknown devices will not work

Re: How to block MAC addresses..

Posted: Thu Jul 31, 2008 4:38 pm
by mh7
'add static ARP entry'
..I think You would mean in IP / ARP List :)

Re: How to block MAC addresses..

Posted: Thu Jul 31, 2008 6:34 pm
by Chupaka
'add static ARP entry'
..I think You would mean in IP / ARP List :)
not in IP->ARP, but checkbox in DHCP Server
users with static IPs (not received via DHCP) will not be served by ROS

Re: How to block MAC addresses..

Posted: Fri Aug 01, 2008 1:51 am
by mh7
'add static ARP entry'
..I think You would mean in IP / ARP List :)
not in IP->ARP, but checkbox in DHCP Server
users with static IPs (not received via DHCP) will not be served by ROS
If someone is added to arp list and using static ip on the computer will be served

Re: How to block MAC addresses..

Posted: Fri Aug 01, 2008 10:13 am
by fatonk
Leave ip arp list intact, no entries should be added there, just under ip dhcp-server make static entries of leased IP addresses and all addresses that are statically configured won't be served, just these dhcp static entries.

regards

faton