Answer the question
In order to leave comments, you need to log in
How to make a "Guest" port in Mikrotik?
Hello everyone, there is a Mikrotik RouterBOARD 3011UiAS-RM router, the Internet comes into it, the entire local network is tied to it, it also splits Ip and goes to the switches. It is necessary to connect the computer through this router, but whatever it is on the local network, let's say in the "guest" network, I want it to be on a different port. How can this be implemented?
Answer the question
In order to leave comments, you need to log in
You put the necessary ports in a separate bridge, hang up a dhcp server on it and write a src-nat rule to access the Internet.
For this task, you need to assign an ip-address to the desired port (bridge, if you need several ports) and throw it out into the world with NAT.
/ip address
add address=10.1.2.1/24 interface=ether2 network=10.1.2.0 comment="DMZ"
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether2
/ip dhcp-server
add address-pool=dmz interface=ether2 name=dhcp-dmz add-arp=yes
/ip dhcp-server network
add address=10.1.2.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=10.1.2.1 netmask=24
/ip pool
add name=dmz ranges=10.1.2.2-10.1.2.254
/interface ethernet
set [ find default-name=ether2 ] arp=reply-only
/ip route rule
add action=unreachable dst-address=10.1.1.0/24 src-address=10.1.2.0/24
add action=unreachable dst-address=10.1.2.0/24 src-address=10.1.1.0/24
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question