
To specify more than one address, include You can specify the MAC address as nn: nn: nn: nn: nn: nn or nnnn. To do this, specify the MAC addresses in the source-address-filter mac-address statement at the following hierarchy The interface to receive packets from specific MAC addresses. When source address filtering is enabled, you can configure Must specify the same MAC address in the configuration of the TX Matrix For each MAC address you specify in theĬonfiguration of a formerly standalone T1600 or T4000 router, you T4000 router are derived from a pool of MAC addresses maintained by Routing matrix, the PIC MAC addresses for the integrated T1600 or

Similarly, when you integrate a T1600 or T4000 router into a Of a formerly standalone T640 router, you must specify the same MACĪddress in the configuration of the TX Matrix router. For each MAC address you specify in the configuration Router are derived from a pool of MAC addresses maintained by the The PIC media access control (MAC) addresses for the integrated T640 What is a good reference for the bridge filtering and ip firewall rules? The mikrotik site is opaque to me.When you integrate a standalone T640 router into a routing matrix, The mikrotik diagram does not appear to be helping. But I am having a very hard time understanding the filtering rules in both the / bridge filter and the / ip firewall filter. My thought was to use bridge and/or firewall filters to crush the DHCP discovery process by the 5268AC and make sure that the mikrotik is the box acquiring our DHCP address from ATT. So you can uniquely identify all frames in the 802.1x auth just by looking at the MAC.Īt the current moment the ATT 5268AC has internet, performed 802.1x auth, acquired an IP address, and is performing NAT for devices on the LAN side of it.

I disabled RSTP on bratt because STP seems to drop 802.1x traffic.Ĩ02.1x auth occurs in a layer 2 broadcast using a special dest address for the frame (for both sides of the communication). Then I created a bridge shared by ether1, ether2: bratt. Here's the goal: fiber/ONT Microtik RB750GrAC So I still need to have the 5268AC plugged in. However, the 5268AC runs 802.1x authentication.


For this and other reasons I am seeking to excise the cancer. It does not offer true bridge mode for using my own router, the UI is terrible, and I cannot seem to use 1.1.1.1 for my DNS. I have fiber service through AT&T and they provide a deeply limiting 5268AC gateway device.
