July 11, 2017

Mikrotik How to block Winbox Discovery + Limit Winbox Access

To hide your mikrotik from being appearing in WINBOX scan negibour list, & to limit WINBOX access from your admin PC only,
Use the Following.


/tool mac-server
add disabled=yes interface=all
/tool mac-server ping
set enabled=no
/ip firewall filter
add action=drop chain=input comment="block mikrotik discovery"
disabled=no dst-port=5678 protocol=udp

add action=drop chain=input comment="ALL WINBOX REQUEST By MAC Address"
disabled=no dst-port=20561 protocol=udp

add action=drop chain=input comment="ALL WINBOX REQUEST EXCEPT FROM MY PC"
disabled=no dst-port=8291 protocol=tcp src-address=!192.168.2.6

You can Also Disable Network Neighbor Discovery on the interface to which your network users are connected
Example:
1
/ip neighbor discovery set ether1 discover=no

No comments:

Post a Comment