Mikrotik

SECURITY UPDATE: DYNAMIC ROUTES ON PPPOE BRIDGE IP ADDRESS ASSIGNMENT

When you assign an address to a pppoe bridge as below 192.168.88.1/24

The router dynamically creates a route on the routing table as shown below

This allows customers to use static ip address on their end bypassing your authorization.

How to overcome this.

Deactivate the bridge ip address assignment

  • Go to Ip
  • On the drop down,Click address
  • Disable the interface bridge ip address assignment.

Monitor network to ensure everything is in order.

You might also like

Leave a Reply

Your email address will not be published. Required fields are marked *