In this tutorial, we will learn how to block a specific IP address to connect to the internet.
In this scenario, we will assume that our LAN network is 192.168.1.0/24. The Mikrotik Ether1 port is connected to our local network and the Ether2 port is connected to our Internet Service Provider.
Now we want to block access to the Ether2 port or the internet for a specific IP address such as 192.168.1.100. The rest of the addresses will have access to the internet. We will go through these settings using the "Winbox" tool.
Login to your Mikrotik router and go to the "Firewall" section.
Now click on the "Out.
Interface" parameter and select "Ether2" as the value.
Because the Ether2 port is connected to the internet or our
ISP.
If we want we can use an address range instead of a single address. Let's assume that we want to block an address range for 192.168.1.100 to 192.168.1.110. Then, the entry will be for the "Src. Address" parameter is "192.168.1.100-192.168.1.110".
No comments:
Post a Comment