RouterOS/ROS禁止指定MAC拨入PPPOE脚本/教程

将PPPOE中的接口禁加桥接并将服务建在桥接接口上,然后使用bridge的防火墙来过滤PPPOEMAC

脚本内容:

#建立bridge
/interface 
add admin-=00:0C:21:91:02:C1 auto-=no name=1

#绑定PPPOE服务接口
/interface  port
add =bridge1 interface=vlan2100

#在pppoe-server修改PPPOE服务的接口为bridge1

#启用bridge防火墙
/interface  settings
set use-ip-firewall=yes use-ip-firewall-for-pppoe=yes use-ip-firewall-for-vlan=no

#拦截黑名单MAC
/interface  filter
add action=drop chain=input disabled=yes src-mac-address=\
    08:10:77:6A:C8:47/FF:FF:FF:FF:FF:FF