Follow us on...
Follow us on G+ Follow us on Twitter Follow us on Facebook Watch us on YouTube
Register
Results 1 to 12 of 12
  1. #1
    Status
    Offline
    bege_4ever's Avatar
    Baru Gabung
    Join Date
    Mar 2010
    Posts
    16
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0

    Unhappy Filter internet menggunakan mac address

    Halo..para master mikrotik.

    Saya mau tanya ada tugas dari kantor
    Bagaimana caranya filter internet menggunakan mac address bukan IP soalnya di kantor memakai DHCP server dari windows server 2003 untuk pembagian IP jadi saya ingin mendaftarkan mac address user tertentu aja yang bisa pakai internet ke mikrotik.
    Saya bingung sudah searching kemana-mana belum dapat, rata-rata semua berdasarkan IP di filter NATnya.

    Thank's jawaban dari para master yang sudah membantu.

    Click here to enlarge
    Last edited by bege_4ever; 07-04-2011 at 10:34.

  2. #2
    Status
    Offline
    dylavig's Avatar
    Member Super Senior
    Join Date
    Jun 2008
    Location
    Medan
    Posts
    537
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    buat aja di winbox


    ip -> firewall -> filter..

    terus add chain forward lalu masukkan src. mac addrs. lalu di drop di action

    nah di masukan aja mac addrs dan di taruh di paling atas.
    Last edited by dylavig; 07-04-2011 at 10:36.

  3. #3
    Status
    Offline
    bege_4ever's Avatar
    Baru Gabung
    Join Date
    Mar 2010
    Posts
    16
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Itu sudah saya lakukan gan..Kalau script itu dijalankan apa perlu yang di NATnya di disable.
    Jika script dibawah ini saya disable, user tidak bisa koneksi internet tidak jalan :

    ip firewall nat add chain=srcnat action=masquerade

    Terus saya berikan script yang agan berikan user tidak bisa konek internet.

  4. #4
    Status
    Offline
    dylavig's Avatar
    Member Super Senior
    Join Date
    Jun 2008
    Location
    Medan
    Posts
    537
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    ya NAT masqueradenya jgn disabled dong.. ya semua jadi pada ga bs pakai inet.

    kan cmn mau blok bbrp mac addrs aja agar ga bs inet kan ?

    semua tetap pada tempatnya. lalu jalankan #2 aja. harusnya sdh bisa kok. tadi pun baru ku test.

    ---------- Post added at 09:57 ---------- Previous post was at 09:50 ----------

    atau klu mau gmpngnya dan cepatnya gini..

    dibuat aja mac addrss yg mau di kasih inet (misalnya cmn 10 endpoints dari 100 endpoints).. nah di daftarin aja tuh semua mac addrs di filter lalu di action Accept.

    lalu buat lagi di bawahnya chain : fwd action : drop

    harusnya sdh bisa

  5. #5
    Status
    Offline
    bege_4ever's Avatar
    Baru Gabung
    Join Date
    Mar 2010
    Posts
    16
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Saya pake contoh script yg dibawah ini dan saya terapkan tetep tidak jalan gan:

    ip firewall filter add chain=input src-mac-address=00:0C:29:32:E6:92 action=accept
    ip firewall filter add chain=input src-mac-address=00:0C:29:32:E6:93 action=accept
    ip firewall filter add chain=input src-mac-address=00:0C:29:32:E6:94 action=accept
    ip firewall filter add chain=input src-address=202.202.1.0/24 action=drop

    Bener kagak gan scriptnya sprti ini...???
    Note : Saya pake mikrotik 2.9.27

    Saya disable salah satu mac address, user masih bisa internetan.
    Last edited by bege_4ever; 07-04-2011 at 11:18.

  6. #6
    Status
    Offline
    cyber_5566's Avatar
    Member
    Join Date
    Apr 2009
    Location
    Palembang
    Posts
    127
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    ip firewall filter add chain=forward src-mac-address=00:0C:29:32:E6:92 action=drop(ini contoh klu mw drop mac diatas aja yang gak bisa akses mikrotik termasuk inet)..

    gini aja, simple kan..liat macnya di ip-arp aja..disana ada mac client yang konek ke mikrotik kita..Click here to enlarge

  7. The Following User Says Thank You to cyber_5566 For This Useful Post:


  8. #7
    Status
    Offline
    dylavig's Avatar
    Member Super Senior
    Join Date
    Jun 2008
    Location
    Medan
    Posts
    537
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    @TS bukan chainya bukan input tp forward aja.

  9. The Following User Says Thank You to dylavig For This Useful Post:


  10. #8
    Status
    Offline
    bege_4ever's Avatar
    Baru Gabung
    Join Date
    Mar 2010
    Posts
    16
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0

    Smile [SOLVED] Filter Internet Menggunakan MAC ADDRESS

    Wah berhasil gan...Thank's bantuannya buat agan2 para master mikrotik. Click here to enlarge

  11. #9
    Status
    Offline
    dencow's Avatar
    Forum Guru
    Join Date
    Jan 2008
    Posts
    1,728
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    1 (100%)
    Click here to enlarge Originally Posted by bege_4ever Click here to enlarge
    Wah berhasil gan...Thank's bantuannya buat agan2 para master mikrotik. Click here to enlarge
    kalau udah berhasil jangan lupa upgrade mikrotiknya ya, jangan pake versi pak tani...
    murah ini ga sampe 400 ribu buat selamanya, apalagi buat kantor tu... Click here to enlarge

  12. The Following User Says Thank You to dencow For This Useful Post:


  13. #10
    Status
    Offline
    miharjo's Avatar
    Member
    Join Date
    Mar 2011
    Location
    east java
    Posts
    127
    Reviews
    Read 0 Reviews
    Downloads
    1
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by dylavig Click here to enlarge
    buat aja di winbox


    ip -> firewall -> filter..

    terus add chain forward lalu masukkan src. mac addrs. lalu di drop di action

    nah di masukan aja mac addrs dan di taruh di paling atas.
    permisi gan, numpang nanya', aq sdh ikutin sprti tutorial agan, trs wktu mau masukin srt. mac address kok error in Src. Address-ip address expected . kr2 knp ya gan? trs maksudnya di taruh paling atas itu apa gan? aq menggunakan MT V 3.30
    Last edited by miharjo; 25-10-2011 at 23:58.

  14. #11
    Status
    Offline
    donz's Avatar
    Baru Gabung
    Join Date
    Jun 2010
    Location
    Bandung
    Posts
    12
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    maaf nih, saya juga lagi nyoba blok ip client agar ngga bisa internetan pakai perintah di atas, tapi tetep aja ip yang bersangkutan bisan pake internet.

  15. #12
    Status
    Offline
    putra_maiwa's Avatar
    Forum Guru
    Join Date
    Sep 2009
    Posts
    1,298
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by donz Click here to enlarge
    maaf nih, saya juga lagi nyoba blok ip client agar ngga bisa internetan pakai perintah di atas, tapi tetep aja ip yang bersangkutan bisan pake internet.
    pake IP Bindings > isi ip atau mac addressesnya

 

 

Thread Information

Users Browsing this Thread

There are currently 2 users browsing this thread. (0 members and 2 guests)

Similar Threads

  1. akses internet lambat menggunakan mikrotik rb1000
    By gitobdg in forum Beginner Basics
    Replies: 16
    Last Post: 28-08-2016, 09:42
  2. [ask] filter mac address
    By kabuto in forum Scripting @ Mikrotik
    Replies: 12
    Last Post: 28-11-2011, 22:07
  3. Need help filter mac address...
    By jhobeaston in forum General Networking
    Replies: 37
    Last Post: 09-12-2009, 14:27
  4. LB dan filter ip konek internet
    By terjunbebas in forum Beginner Basics
    Replies: 9
    Last Post: 16-06-2009, 20:20
  5. Telnet menggunakan MAC Address
    By ry0002002 in forum Beginner Basics
    Replies: 1
    Last Post: 24-04-2008, 10:39

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •