G
G
Gloomy_Nort2016-06-28 03:13:20
network hardware
Gloomy_Nort, 2016-06-28 03:13:20

How to restrict connected devices via Wi-Fi to Mikrotik?

There is a room. There is a Mikrotik to which 30Mb / s comes.
It is necessary to distribute 50-100 Chinese who will connect via Wi-Fi from tablet phones.
Despite the fact that everyone is charged for the Internet.
How to make sure that they do not install a router and do not resell the Internet?
Kill the speed, what else can you do?

Answer the question

In order to leave comments, you need to log in

2 answer(s)
P
paxlo, 2016-06-28
@paxlo

Many routers reduce TTL (not always and not all), so as an option to block packets with ttl=127 and 63,

/ip firewall filter
add chain=forward in-interface=local ttl=equal:127 action=drop
add chain=forward in-interface=local ttl=equal:63 action=drop

but it's not 100%. The Chinese can buy a Mikrotik or put a router with *wrt and fix ttl back :)

D
Dmitry Shitskov, 2016-06-28
@Zarom

They paid for the Internet. Let them do what they want. Bandwidth restrictions will be enough to make no sense in reselling.
In addition to the method voiced by paxlo , you can also control the presence of a router / NATm manually or by passing HTTP traffic to a certain control server. If different versions of browsers are connected from the same IP, we can assume the presence of NAT. Probably, there are other options for tracking by traffic.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question