MikroTik Tutorial 37 - Prevent clients from accessing your router

[@mikkio5371]

Your tutorial is 6yrs old .still one of the best out there . Keep it up

[@karelvij4755]

Thank you for the tutorial! I used this to improve security on the guest WiFi. I did notice a fatal flaw though. If the router has for example an internet connection on ether1 and is assigned a IP trough DHCP or PPPoE; that (ever changing) IP can also be used to access the services. It is wise to block the management TCP ports on that interface.

[@curtisnehring7627]

Thank you for the videos. They have made the learning curve much less. One thing I wanted to point out is that if you have multiple DHCPs where the router would be accessible through the gateway address (E.G. 10.0.0.1) it looks like you have to add these IPs to the router address lists too or the rule will not catch access to the router at those addresses. There may be other ways to achieve this but for me to get this working with my situation/config I had to add the router/gateway IP for each DHCP to the 'router' address list. Also, the interface and options in the 'MAC Server' window are a bit different in my version of the firmware (v6.45.3). Thanks again for your work on these videos!

[@troofs]

Good Tutorial TKSJa. I already knew about this setting but this tutorial will be very helpful for newbies who don't want their clients to keep trying to brute force their main router.

[@TKSJa]

Thanks

[@susanta-swain]

In real-time network your tutorials helps me alot.

[@TKSJa]

That's Great!

[@aalvarez711]

ive been watching your playlist and i am so impressed. Thank you so much for all the time and effort you put on these videos we all greatly appreciate it.

[@wasimijaz6233]

You are an excellent teacher. Looking forward for more videos (MikroTik and other subjects). Keep up the good work.

[@TKSJa]

Thank you

[@ahmdnaube3745]

Hats off for you man. This is one great piece of information.

[@Martin-ot7xj]

Hi there, is it possible to make this rule for prevent access from outside or internet to the microtik router as well?? Thnx

[@AliMirjamali]

Thank you very much for your 37 MikroTik Tutorials. You are an excellent teacher. Looking forward for more videos (MikroTik and other subjects). Keep up the good work. During this video and tutorial 28 (port forwarding), I was looking for static DHCP IP lease based on client MAC. So it won't be necessary to manually set static IP on management PC or web server (I already found it). Maybe this item would be worth making a short video ;-)

[@TKSJa]

Great idea

[@adorakate6246]

You are so amazing , your a hero.

[@TKSJa]

You are welcome

[@cafecorali]

Thank you for this tutorial. Actually, thank you for all your tutorials. Subbed.

[@ahmdnaube3745]

I have a question, that is i have done all of this and it's working fine with browsers. Which means other than my laptop i cannot access the router through mac nor ip. But in my phone using winbox android app i'm able to access the router using ip address. Why is that?

[@TrueNetworking]

I rather went to the services and disabled all the insecure ports and added the only allowed ips for router access. Can that be an option too?

[@rezashirali877]

very well. thank u

[@gr_excel]

Is there any way to isolate my clients that are on my Ethernet2 port? I don't want them to access my LAN. Example: i have my LAN with 10.1.1.x IPS and i share my internet with my neighbor with IPS 10.1.2.x but i don't want them to access my router (10.1.1.1) neither my computer's shared files (10.1.1.10)

[@abrahamlora3650]

Create a different VLAN and apply this rule to that VLAN in specific. I am about to do something similar.

[@programmerako]

is it possible to use mac address of the server pc? just the mac address of the server pc only can access the router?

[@AnilAdhikari]

nice1, can you do a video on CRS, how to use Router and Switch Separatel on CRS?

[@TKSJa]

Noted

[@broadbandsolutions6517]

good tutorial again!!!

[@frostsmaker8966]

Of course it's good and a basic knowledge for us (newbie), by the way I'm the one who ask for it. You should ask TKSJa if you don't understand something or need a new tutorial. He is good teacher for this topic. :)

[@mnoquiao]

I have put these in 10.10.0.2-9 'Address Lists' and now I can't connect.

[@TKSJa]

Seem like you are using one of those IPs, manually set you PC ip outside of that range 10.10.0.10...

[@herrolhamilton]

How can you lack clients from accessing your modem

[@abdulkhaliqali5356]

please after you disabled Winbox to use mac to link to router how can i use Onebox to mange router Mikrotik

[@TKSJa]

SSH

[@mohammedgamal5367]

I can't access router too after i disable winbox to use mac to link to it how can i please ?

[@santoshmahato1938]

Hello sir, i am using mikrotik rb951. i want to use that router as hotspot user. i want to make user id, limit the bandwidth using queue tree. please advice.

[@TKSJa]

+santosh mahato This router had reach end of life. I not seeing much on the specs other than it has 32mb of ram. Go ahead and download the user-manager package and see if it works.

[@santoshmahato1938]

hello sir ..I am running hotspot . creating used id and password UpTo 50 client. providing 512kbps per client from Ethernet port 2 it is slow. but running from router wifi gives more speed than limit. so please suggest or email me on [e-mail], how to configure it . please I request you

[@Raphael-df8zt]

Nice Video

[@DipajyotiDe]

Tutorial for BGP Routing is required

[@TKSJa]

+Dipajyoti De Noted

[@time.7106]

What's to stop a client giving themselves this IP statically?

[@TKSJa]

nothing, so you would have to come up with other ways of blocking

[@bhryneyangan7567]

Hi sir, can I configure using webfig not on winbox? Thank you. 😊

[@TKSJa]

Yes you can.

[@bhryneyangan7567]

Seems that I forgot to make my IP Static, now it changed. I can't login.

[@ayazsahil1802]

and video for dhcp hotspot : server dhcp ... or wirless roter 2011 mikrotic dhcp hotspot make video for this

[@TKSJa]

+ayaz sahil Here is the video kzbin.info/www/bejne/mHnCZ4CJbrmSpJY

[@nantv5092]

I have now a crush on you ayeeeee