Community discussions

MikroTik App
 
Jenkins84
just joined
Topic Author
Posts: 7
Joined: Tue Dec 17, 2013 3:47 pm

Whitelisting RB2011uas-2hnd-in

Wed Dec 18, 2013 7:52 am

I have just gotten an RB2011UAS-2HND-IN. I am new to advanced features of router. I want to setup two LANs on this router. I need to allow normal internet traffic to PCs on first network, but I want to Whitelist the second network (PBX) so that only the sip provider's IPs and LAN traffic can go through to PBX and phones. What would be the best way to set up this Whitelist?

Thank you
 
aaronhun22
Frequent Visitor
Frequent Visitor
Posts: 97
Joined: Fri Nov 15, 2013 2:15 am
Location: Las Vegas, Nevada, USA

Re: Whitelisting RB2011uas-2hnd-in

Mon Dec 23, 2013 10:03 pm

You would use an address group and then add it to the firewall allow list.
ip firewall address-list add list="SIP Allowed" address=sip-address
ip firewall filter add chain=forward src-address-list="SIP Allowed" action=accept dst-address=sip-network
ip firewall filter add chain=forward dst-address=sip-network action=drop

Who is online

Users browsing this forum: Kharv3st and 36 guests