Hello, I would like to block the possibility of communication between specific ip addresses in the network.

On the internal network? Is communication between these addresses at layer 2 or layer 3? If in layer 2, are you bridged or are you using a built-in switch? If in layer 3: Code: text Expand Select all Copy to clipboard/ip firewall filter add chain=forward src-address= dst-address= action=drop

How is someone supposed to answer such a question? Have you thought? My answer: Ask users not to do this. ps Describe the network, hardware, etc.

On the internal network. MikroTik CCR1016-12G. Cisco Switch. For example, blocking access to the device's resources under 192.168.1.21 for the address 192.168.1.30.

So in the second layer. This is not possible without bridge and / or switch filtering. It is easier to separate selected devices with limited access to a separate subnet and filter in layer 3.

Mikrotik. How to block access to several ip addresses in the network for selecte

przemo6996 7341 4

Treść została przetłumaczona

Zobacz oryginalną wersję tematu

Reply | New topic

#1 16686059 07 Sep 2017 11:25

przemo6996 przemo6996

Level 9

» |

Post #1
16686059 07 Sep 2017 11:25

Hello, I would like to block the possibility of communication between specific ip addresses in the network.
ADVERTISEMENT
#2 16686116 07 Sep 2017 11:53

ryba884 ryba884

Level 19
» | Helpful post? (0)

Post #2
16686116 07 Sep 2017 11:53

On the internal network? Is communication between these addresses at layer 2 or layer 3? If in layer 2, are you bridged or are you using a built-in switch? If in layer 3:
Code: text Expand Select all Copy to clipboard
/ip firewall filter add chain=forward src-address= dst-address= action=drop
ADVERTISEMENT
#3 16686126 07 Sep 2017 11:56

Jawi_P Jawi_P

Level 36

» | Helpful post? (0)

Post #3
16686126 07 Sep 2017 11:56

How is someone supposed to answer such a question?
Have you thought?
My answer: Ask users not to do this.

ps Describe the network, hardware, etc.
ADVERTISEMENT
#4 16686132 07 Sep 2017 12:00

przemo6996 przemo6996

Level 9

» | Topic author Helpful post? (0)

Post #4
16686132 07 Sep 2017 12:00

On the internal network. MikroTik CCR1016-12G. Cisco Switch. For example, blocking access to the device's resources under 192.168.1.21 for the address 192.168.1.30.
#5 16686148 07 Sep 2017 12:10

ryba884 ryba884

Level 19

» | Helpful post? (0)

Post #5
16686148 07 Sep 2017 12:10

So in the second layer. This is not possible without bridge and / or switch filtering. It is easier to separate selected devices with limited access to a separate subnet and filter in layer 3.
Create an account, log in and become active in a forum and ads will not appear. You will receive points by participating in discussions.
Join this discussion.

Install the application

Didn't find an answer? Ask Artificial Intelligence

*I agree to send the question to OpenAI, Anthropic PBC, Perplexity AI, Inc., Kagi Inc., Google LLC - owners of language models in order to prepare the best response. The companies may monitor and log information entered into the form.

*I agree to publicly display my question and answer. The question and answer will be publicly available to everyone. The process may take a few minutes. Upon completion, you will be redirected to the page with the answer.

Wait...(2min)

Reply | New topic

Report a violation of the law

Mikrotik. How to block access to several ip addresses in the network for selecte

Didn't find an answer? Ask Artificial Intelligence