Page 1 of 1

Mikrotik-AP client filter

Posted: Fri Dec 09, 2005 3:56 pm
by santajosh
I use Mikrotik in AP mode. RouterBOARD 532 and one wireless card (SENAO NL-2511MP+ Mini-PCI Adapter Prism).
I configure a bridge (bridge1) and put the LAN and the WIR interface to it.
Configure the WIR interface:
mode: AP_bridge, SSID: AP1, Band: 2.4Ghz, freq: 2457 and the default setting.

It's work fine , I can connect to it from my wifi notebook. I try to connect other notebook and it's work fine. I can reach the notebook 1 from the notebook 2. Is there any method to limit this? I don't like users to overload my AP with their file transfer. So can I limit this connection?

AP <-> User 1 ---- OK
AP <-> User 2 ---- OK
User 1 <-> AP <- > User 2 --- DENIED

So where am I search?

Thank you in advice!


Santajosh

Posted: Fri Dec 09, 2005 10:58 pm
by durim
Try seting default forward to off and this will block interclient traffic

Posted: Sat Dec 10, 2005 9:04 am
by santajosh
Thank you for the fast answer. But where can I found this?

My another morning idei to do a forward rulle in the firewall

accept forward 192.168.0.0/16 to ETH on WIR interface ( If it's possible to add in to the firewall menu...)
drop all

Posted: Sat Dec 10, 2005 12:41 pm
by dwright
[admin@mikrotik] > interface wireless print
[admin@mikrotik] > interface wireless set <interface #> default-forwarding=no
If your using the accesses list, you need to turn it off for each client there as well.
[admin@mikrotik] > interface wireless access-list print
[admin@mikrotik] > interface wireless access-list set <rule #> forwarding=no
You don't actually use the <> in the examples above. Just the number.

Dan

Can i do Mac address Filtlering

Posted: Tue Dec 20, 2005 7:28 pm
by onowojemma
I instail and Ap with routerbaord 230 and is runing on Mikrotik 2.9.10 is there any way i can do MAC Address filtering for other client that will connect to it so that those who there Mac adress are not on the list will not asociate with the AP? please i need help

Re: Can i do Mac address Filtlering

Posted: Thu Dec 22, 2005 7:53 pm
by miahac
I instail and Ap with routerbaord 230 and is runing on Mikrotik 2.9.10 is there any way i can do MAC Address filtering for other client that will connect to it so that those who there Mac adress are not on the list will not asociate with the AP? please i need help
Yes. I am a nooby as well but I just use the winbox tool. Click on wireless, click on access list, click on the + symbol, put in the mac address.

Posted: Fri Dec 23, 2005 12:25 am
by onowojemma
Thanks it work with i use it with arp=reply-only so that they can not be changing there ip address thanks a milliom