Mikrotik

206 readers

7 users here now

A community-contributed sublemmy for all things Mikrotik. General ISP and network discussion also permitted. Please ensure if you're asking a question you have checked the Wiki First: https://help.mikrotik.com

Mikrotik Rules: Don't post content that is incorrect or potentially harmful to a router/network.

This in itself is not a bannable offence but answers that are verifiably incorrect or will cause issues for other users will be edited or removed.

Examples: Factual errors - "EOIP is always unsecure" Configuration problems - Config that would disable all physical interfaces on a router Trolling - "Downgrade it to 5.26"

founded 1 year ago

MODERATORS

rayman30

Securing my network even more (self.mikrotik)

submitted 9 months ago by Nogami to c/mikrotik

4 comments fedilink hide all child comments

My home network is firewalled and reasonably secure (all permanent devices and IOT devices have MAC addresses tracked and registered) but I’d like to improve it even more:

Home devices (servers, printers, laptops, etc) with registered MAC addresses which can’t be accessed from my registered IOT devices or from unregistered guest devices.
QOS rules for all guest devices.

Using a HEX to run the network with unifi AP hardware.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 6 points 9 months ago (1 children)

I’d split your network into 3 vlans. One for home, one for IoT and one for guest access (probably over WiFi). That way your firewall can handle the access rules.

[–] Nogami 1 points 9 months ago

That sounds like a good starting point. I’ll need to read up on setting up VLANs.