General Information

idge firewall, not in forwarded protocols as in the other case the router will not be able to
receive IP packets itself, and thus will not be able to provide routing).
To make bridge, drop IP, ARP and RARP packets:
[admin@MikroTik] interface bridge firewall> add mac-protocol=2048 action=drop
[admin@MikroTik] interface bridge firewall> add mac-protocol=2054 action=drop
[admin@MikroTik] interface bridge firewall> add mac-protocol=32821 action=drop
[admin@MikroTik] interface bridge firewall> print
Flags: X - disabled, I - invalid
0 mac-src-address=00:00:00:00:00:00 in-interface=all
mac-dst-address=00:00:00:00:00:00 out-interface=all mac-protocol=2048
src-address=0.0.0.0/0 dst-address=0.0.0.0/0 protocol=all action=drop
1 mac-src-address=00:00:00:00:00:00 in-interface=all
mac-dst-address=00:00:00:00:00:00 out-interface=all mac-protocol=2054
src-address=0.0.0.0/0 dst-address=0.0.0.0/0 protocol=all action=drop
2 mac-src-address=00:00:00:00:00:00 in-interface=all
mac-dst-address=00:00:00:00:00:00 out-interface=all mac-protocol=32821
src-address=0.0.0.0/0 dst-address=0.0.0.0/0 protocol=all action=drop
[admin@MikroTik] interface bridge firewall>
Application Example
Example
Assume we want to enable bridging between two Ethernet LAN segments and have the MikroTik
router be the default gateway for them:
Page 184 of 568
Copyright 1999-2005, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.