Normally, you allow internet access to all the IP blocks or a specific IP block by NAT configuration. Single IP NAT strategy is one of the most efficient ways to block internet access through your router. In this article, I will show you some strategies by which you can easily block unauthorized access in your network.
MikroTik has integrated a lot of features by which you can prevent this type of unauthorized access in your router. Then, how can you prevent this unauthorized access in your network? Don’t worry. Obviously, it is not a better and secure network design. Now, if you have an expert user who knows networking can change his IP address and can consume unlimited bandwidth because you have created queue rules for specific IP addresses and also you have NATed all the IP blocks. Also you have created queue rules for limiting bandwidth based on IP address. In this network, you have configured WAN, LAN, Gateway, DNS and NAT. For example, say, you have configured a simple network like below diagram. If other devices try to access internet, they will be rejected by your router. As a network administrator, sometimes you may need to allow internet access some specific devices. MikroTik router has a lot of features by which a network administrator can design his network as he likes.
