How to allow internet access to a specific MAC Address?

teemx · Tue Aug 16, 2005 2:16 pm

How can i set a list users with internet access based on their MAC address?

I am on Version 2.8.

Please help THX.

cabana · Wed Aug 17, 2005 5:51 am

http://forum.mikrotik.com/viewtopic.php ... ght=ip+mac

http://forum.mikrotik.com/viewtopic.php ... ght=ip+mac

teemx · Wed Aug 17, 2005 7:45 am

thank cabana,

this do not work for me, becoz i having a hotspot with DHCP in that MT machine. (those which required login)

Beside, we had a few SOHO Router connected to the same interface, which i wan to setup the MAC list to allow those SOHO Router to access internet without authentication.

Anyone of you could help?!

Pls pls pls plzzz.............

Wed Aug 17, 2005 8:27 am

2.9 HotSpot has different authentication methods, one of them is mac-address authentication.

One thing, you should reconfigure HotSpot in 2.9, because 2.8 is incompatible with it.

wildbill442 · Wed Aug 17, 2005 8:34 am

add a mangle rule to match packets based on the src mac-address and setup a flow mark called hs-auth, allow access to hs-auth and deny other traffic from going anywhere but to your hotspot login page.

There may also be a setting in the Hotspot feature within routeros to authenticate users by MAC address. I'm sure there's somthing in the manual on mikrotik.com reguarding authentication methods for hotspots....

jarosoup · Wed Aug 17, 2005 7:33 pm

To add to what wildbill said, add the user(s) MAC address in the DHCP lease table so they always get the same IP address and so your firewall rules based on a certain IP will bypass the hotspot for the right user(s) if you would prefer to base rules on IP addresses instead of MACs in the firewall. Either way would work though.

sankofa411 · Wed Aug 17, 2005 9:20 pm

I beleive on MT 2.8 you can use the users MAC as username and password that would not prompt them for login screen.

On MT 2.9 you can use IP Binding which works beautiful so far for me.

Sankofa