Managing Mikrotik MAC Address List: A Comprehensive Guide

Mikrotik, a popular network device, allows users to manage and control various aspects of their network traffic through its powerful firewall features. One such feature is the address list, which enables users to create lists of IP addresses grouped together under a common name. In this article, we will explore how to create and manage Mikrotik MAC address lists.

Creating a Static Address List Entry

To create a static address list entry in Mikrotik, use the `/ip firewall address-list add` command followed by the required parameters. For example, to add an IP address 192.0.34.166/32 to the address list `drop_traffic`, you would use the following command:

```

/ip firewall address-list add list=drop_traffic address=192.0.34.166/32

```

Creating a Dynamic Address List Entry

In addition to static entries, Mikrotik also allows users to create dynamic address lists. These lists can be updated dynamically via the action `add-src-to-address-list` or `add-dst-to-address-list` items found in NAT, Mangle, and Filter facilities.

For example, the following command creates a dynamic address list of people that are connecting to port 23 (telnet) on the router and drops all further traffic from them for 5 minutes:

```

/ip firewall mangle add chain=input protocol=tcp dst-port=23 action=add-src-to-address-list table=drop_traffic

```

Timeout Parameter

When creating a dynamic address list entry, you can specify a timeout parameter to determine how long the address will be stored on the RAM and removed after a system reboot. If no timeout is specified, the address will be saved to the list permanently to the disk.

Updating Address List Records Dynamically

Address list records can also be updated dynamically via the action `add-src-to-address-list` or `add-dst-to-address-list` items found in NAT, Mangle, and Filter facilities. These actions work in passthrough mode, which means that the matched packets will be passed to next firewall rules.

Understanding Address List Records

An address list record can contain a single IP address or range of IPs to add to the address list or a DNS name. Firewall filter, mangle, and NAT facilities can then use those address lists to match packets against them.

By following these steps and understanding how Mikrotik MAC address lists work, you can effectively manage and control your network traffic. Whether you're a seasoned network administrator or just starting out, this comprehensive guide has provided you with the necessary information to get started with managing your Mikrotik MAC address list.

Mikrotik mac address list