MikroTik Tutorial 103 - Block users who static their IP Address

[@tomaszkryszan5933]

Thanks for great tutorial! I've made it simpler way: 1. Convert all DHCP leases to static ones. 2. Set Bridge ARP to reply-only; 3. Set DHCP server address pool to static only, authoritative to no, check add ARP for leases and uncheck Conflict detection. As a result all static IP users are blind :)

[@TKSJa]

Nice!

[@ahappymind]

so much helpful and i edit it because when to turn the address pool to static only, you couldn't get any ip from dhcp pool. thereofore i only checked the add arp for leases and didn't uncheck the conflict detection. now when i make leases into static, it will generate an ip with relevant mac to arp list. give me so much time to statically add them into arp list. Tnx a lot

[@chrismallia29]

To prevent a VLAN only from using static IPs, in the Vlan interface I set ARP to reply, and in DHCP server for Vlan set ARP to leases , this way no one in the guest network can set any static IPs but I wouldn't have to give everyone a static IP for them to browse (I also could give them a static if I wish), doing it on the bridge any new devices could not connect aldo they were set to dhcp. as they must be set static before setting the bridge to reply only.

[@mrelaborate]

my inspiration on learning Mikrotik thank you sir

[@TKSJa]

You are welcome

[@mikkio5371]

How do i stop randomization of mac address from client devices?, such the new pc and mobile phones. Because randomization of mac address has made static ip in dhcp servers useless. And one can run out of ip quickly. Pls help 🙏🙏

[@tonygroenewald7865]

Very cool but what happens to new devices connecting to your network? will they even have internet or will you have to static all devices ?

[@perosgeorgios]

Thanks for one more time 👍

[@TKSJa]

No problem 👍

[@bushcraft.azerbaijan]

hi- i have ccr1009 os v.6.48.2 - i have dhcp server confiquration and static host in ^Leases^ i pust ^Block access^ but nothing not happening- host can connect to internet--why ?

[@matej_stepan]

What if the user changes his Mac Address?

[@nikszero]

does this mean i have to put static ARP for all trusted clients? thanks bro

[@hyperman9053]

Thanks very grateful. How to Make IpV6 ??

[@TKSJa]

Your welcome, I haven't done much with IPV6.

[@timfoster5043]

Good video.

[@TKSJa]

Thanks

[@princevisram9246]

Already watching

[@TKSJa]

Great!

[@princevisram9246]

@@TKSJa you helped me deploy an entire isp

[@TKSJa]

@@princevisram9246 WOW that great!

[@u7i80]

Hi! Thank You! how about randomize MAC by some mobile phones

[@TKSJa]

There won't be an issue as long as the use gets their IP from the dhcp server

[@putikbaboy81]

Thank you

[@TKSJa]

You are welcome

[@bigtimemwas4282]

how can one reach you sir. a contact maybe?

[@isaiasfreitas1]

How to resolve when a device can not IP, is always in OFFER ? Obrigado do BRASIL;

[@TKSJa]

Check your address pool if it has a range of IP example 192.168.88.2 - 192.168.88.254

[@stephenochieng320]

Can you take me through how to configure mpesa for Hotspot payments kjndly

[@TKSJa]

Sorry I really don't know how to.

[@nikolashuminosky6987]

would be awesome if you can make some script to find all matched mac-add ,in my case i got 100 clients

[@nikolashuminosky6987]

and also what published does?

[@TKSJa]

wiki.mikrotik.com/wiki/Manual:IP/ARP

[@good2see]

Replace your noisy clock 😁

[@profkwl775]

this only works for IP that's set as static IP. what about for hotspot users? surely, you won't set static IP for all hotspot users..

[@jerimias2k]

So what's your hotspots purpose if you let everybody in and filter them?

[@profkwl775]

@@jerimias2k you don't seem to understand my question. i too don't understand your question.

[@75klop]

в конце услышал "султан сволочи" ??

[@nabbe63o]

Is there anyway I can contact you?!?