{"id":699,"date":"2016-08-04T00:06:34","date_gmt":"2016-08-04T03:06:34","guid":{"rendered":"http:\/\/www.tech-nico.com\/blog\/?p=699"},"modified":"2016-08-04T00:14:45","modified_gmt":"2016-08-04T03:14:45","slug":"script-mikrotik-para-limitar-dispositivos-moviles-con-dhcp-con-queues-dinamicas","status":"publish","type":"post","link":"http:\/\/www.tech-nico.com\/blog\/script-mikrotik-para-limitar-dispositivos-moviles-con-dhcp-con-queues-dinamicas\/","title":{"rendered":"Script Mikrotik para LIMITAR dispositivos m\u00f3viles con DHCP con QUEUEs Dinamicas"},"content":{"rendered":"

Bloquear \/ Limitar<\/h1>\n

En las 3 versiones\u00a0anteriores de este script podiamos \u00abbloquear\u00bb un dispositivo movil tanto por DHCP como en el firewall del Bridge (capa 2) y en firewall capa 3.<\/p>\n

Tal vez te interesen los scripts anteriores:
\nVersion 1: Filtrar en Bridge Filter<\/a>
\nVersion 2: Filtrar en Firewall Filter<\/a>
\nVersion 3: Filtrar con DHCP Block<\/a><\/p>\n

Ahora con una m\u00ednima modificaci\u00f3n podemos\u00a0controlarles el ancho de banda a cada uno de ellos. En este caso el script permite setear el RATE-LIMIT en una variable para todos los dispositivos.<\/p>\n

\r\n########## INICIO DEL SCRIPT\r\n:local DHCPSERVER "dhcp1";\r\n:local LIMITE "256k";\r\n# # www.tech-nico.com \r\n \r\n:foreach i in=[\/ip dhcp-server lease find active-server=$DHCPSERVER] do={\r\nlog warning "Hola";\r\n    :local DhcpDynMAC [\/ip dhcp-server lease get $i mac-address];\r\n                :local DhcpDynCLIENTID [\/ip dhcp-server lease get $i active-client-id];\r\n    :local DhcpDynHOST [\/ip dhcp-server lease get $i host-name];\r\n    :local phoneNAME [:pick $DhcpDynHOST 0 4];\r\n \r\n    :if ( ($phoneNAME="BLUS") || ($phoneNAME="iPad") || ($phoneNAME="andr") || ($phoneNAME="Andr") || ($phoneNAME="Wind") || ($phoneNAME="iPho") || ($phoneNAME="BLAC") ) do={\r\n        \/ip dhcp-server lease set $i block-access=no  rate-limit="$LIMITE" insert-queue-before=first  mac-address="$DhcpDynMAC" use-src-mac=yes comment="$DhcpDynHOST" server="$DHCPSERVER" client-id="$DhcpDynCLIENTID";\r\n    }\r\n}\r\n############## FIN DEL SCRIPT\r\n<\/pre>\n
La forma de limitar del script (sincronizando con queues) es como lo hacen algunos servidores radius.<\/h2>\n
El script recorre la lista de Leases DHCP y busca los dispositivos que comienzan\u00a0con Host_name \u00abiPad\u00bb, \u00abandr\u00bb, etc. Luego lo edita, agregandole el limite de velocidad. Esto instantaneamente agrega un Queue dinamico en la lista de queues, controlando asi en el acto a cada Lease. Si el lease caduca, el queue\u00a0se elimina solo, y si el lease por alguna razon\u00a0renueva con otra direccion IP, tambien lo hace el queue de manera sincronizada. Es tal y como lo manejan los Servidores Radius.<\/strong><\/p>\n
Espero que lo disfruten de estas utilidades tan sencillas pero al mismo tiempo tan brillantes.<\/p>\n
A pedido de Leonardo Jung. (excelente idea).<\/p>\n
Saludos.<\/p>\n","protected":false},"excerpt":{"rendered":"
Bloquear \/ Limitar En las 3 versiones\u00a0anteriores de este script podiamos \u00abbloquear\u00bb un dispositivo movil tanto por DHCP como en el firewall del Bridge (capa 2) y en firewall capa 3. Tal vez te interesen los scripts anteriores: Version 1: … Sigue leyendo →<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":701,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[32,73],"tags":[48],"class_list":["post-699","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-programacion","category-scripts","tag-mikrotik"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2016\/08\/Ookla_Speedtest_HTML5.0.0.png?fit=1280%2C854","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/phA9Q-bh","jetpack_likes_enabled":true,"jetpack-related-posts":[{"id":645,"url":"http:\/\/www.tech-nico.com\/blog\/script-mikrotik-para-bloquear-dispositivos-moviles-en-firewall\/","url_meta":{"origin":699,"position":0},"title":"Script Mikrotik para bloquear dispositivos moviles en Firewall","author":"soporte","date":"agosto 7, 2015","format":false,"excerpt":"Bloqueando Celulares desde Mikrotik con Firewall (Efectividad 80%) NOTA: Esta es la version para filtrar por firewall, tambien podes filtrar en bridge filter o\u00a0bloquear directamente en dhcp-server. Me toco en un colegio tener que dejar sin navegaci\u00f3n\u00a0a los celulares.\u00a0En este caso opte por armar un script que recorra la lista\u2026","rel":"","context":"En \u00abProgramaci\u00f3n\u00bb","block_context":{"text":"Programaci\u00f3n","link":"http:\/\/www.tech-nico.com\/blog\/category\/programacion\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=700%2C400 2x, https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=1050%2C600 3x"},"classes":[]},{"id":641,"url":"http:\/\/www.tech-nico.com\/blog\/script-mikrotik-para-bloquear-dispositivos-moviles-con-dhcp\/","url_meta":{"origin":699,"position":1},"title":"Script Mikrotik para bloquear dispositivos m\u00f3viles con DHCP","author":"soporte","date":"julio 31, 2015","format":false,"excerpt":"El script nacio por un\u00a0comentario de nuestro colaborador \"Felix Serrato\" que NO\u00a0vio la necesidad de bloquear los dispositivos celulares usando firewall o bridge filter. Es decir, bloquearlos directamente en los \"leases\" del dhcp-server y ademas que el board Mikrotik\u00a0utilice\u00a0menos recursos (si es que hay muchos dispositivos para\u00a0bloquear en tu red).\u2026","rel":"","context":"En \u00abProgramaci\u00f3n\u00bb","block_context":{"text":"Programaci\u00f3n","link":"http:\/\/www.tech-nico.com\/blog\/category\/programacion\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=700%2C400 2x, https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=1050%2C600 3x"},"classes":[]},{"id":582,"url":"http:\/\/www.tech-nico.com\/blog\/script-mikrotik-para-bloquear-dispositivos-moviles-en-bridge-muy-efectivo\/","url_meta":{"origin":699,"position":2},"title":"[Actualizado] Script Mikrotik para bloquear dispositivos m\u00f3viles en bridge – Muy Efectivo!","author":"soporte","date":"marzo 20, 2016","format":false,"excerpt":"Bloqueando Celulares desde Mikrotik con Bridge filter (Efectividad 80%) NOTA: Esta es la version para filtrar por bridge, tambien podes filtrar en firewall\u00a0o\u00a0bloquear directamente en dhcp-server. Me toco en un colegio tener que dejar sin navegaci\u00f3n\u00a0a los celulares.\u00a0En este caso opte por armar un script que recorra la lista de\u2026","rel":"","context":"En \u00abProgramaci\u00f3n\u00bb","block_context":{"text":"Programaci\u00f3n","link":"http:\/\/www.tech-nico.com\/blog\/category\/programacion\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=700%2C400 2x, https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=1050%2C600 3x"},"classes":[]},{"id":576,"url":"http:\/\/www.tech-nico.com\/blog\/script-mikrotik-para-patear-un-cliente-registrado-con-mala-senal\/","url_meta":{"origin":699,"position":3},"title":"Script Mikrotik para patear un cliente registrado con mala se\u00f1al","author":"soporte","date":"marzo 4, 2015","format":false,"excerpt":"Hola amigos, bueno, este script no es muy nuevo que digamos. Pero lo voy a postear porque le hice un agregado para mi gusto bastante importante. En este caso, se trata de un routerboard 2011 con Wifi, y va a instalarse en un colegio.\u00a0Como hay muchos celulares y netbooks, la\u2026","rel":"","context":"En \u00abProgramaci\u00f3n\u00bb","block_context":{"text":"Programaci\u00f3n","link":"http:\/\/www.tech-nico.com\/blog\/category\/programacion\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=700%2C400 2x, https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=1050%2C600 3x"},"classes":[]},{"id":1092,"url":"http:\/\/www.tech-nico.com\/blog\/mikrotik-script-para-bloquear-intentos-de-login\/","url_meta":{"origin":699,"position":4},"title":"Mikrotik Script para bloquear intentos de login","author":"soporte","date":"julio 18, 2023","format":false,"excerpt":"Leyendo en el foro de mikrotik me encontre con este script que monitorea el log en busca errores , Y bloquea en base a la cantidad de intentos de acceso. Lo interesante es que podemos configurarlo para detectar distintos tipos de acceso. Por ejemplo los famosos intentos de acceso por\u2026","rel":"","context":"En \u00abmikrotik\u00bb","block_context":{"text":"mikrotik","link":"http:\/\/www.tech-nico.com\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=700%2C400 2x, https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2015\/05\/logo_tech_nico.com_.jpg?fit=1200%2C1018&resize=1050%2C600 3x"},"classes":[]},{"id":1066,"url":"http:\/\/www.tech-nico.com\/blog\/routeros-dhcp-server-automatico-con-queues-dinamicas\/","url_meta":{"origin":699,"position":5},"title":"RouterOS DHCP Server Autom\u00e1tico con Queues Din\u00e1micas","author":"soporte","date":"febrero 10, 2022","format":false,"excerpt":"Esto esta pensado para lugares de mucha \"mucha\" concurrencia, para no derrochar recursos. Direcciones IP y Ancho de Banda. Por supuesto que esto tiene que estar acompa\u00f1ado de un buen CPU (para mi caso con un equipo 2011, me fue suficiente), y tambi\u00e9n deber\u00eda estar acompa\u00f1ado de un caudal de\u2026","rel":"","context":"En \u00abmikrotik\u00bb","block_context":{"text":"mikrotik","link":"http:\/\/www.tech-nico.com\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2022\/02\/queue_dyn_dhcp.png?fit=1200%2C590&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2022\/02\/queue_dyn_dhcp.png?fit=1200%2C590&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2022\/02\/queue_dyn_dhcp.png?fit=1200%2C590&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2022\/02\/queue_dyn_dhcp.png?fit=1200%2C590&resize=700%2C400 2x, https:\/\/i0.wp.com\/www.tech-nico.com\/blog\/wp-content\/uploads\/2022\/02\/queue_dyn_dhcp.png?fit=1200%2C590&resize=1050%2C600 3x"},"classes":[]}],"_links":{"self":[{"href":"http:\/\/www.tech-nico.com\/blog\/wp-json\/wp\/v2\/posts\/699","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.tech-nico.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.tech-nico.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.tech-nico.com\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"http:\/\/www.tech-nico.com\/blog\/wp-json\/wp\/v2\/comments?post=699"}],"version-history":[{"count":1,"href":"http:\/\/www.tech-nico.com\/blog\/wp-json\/wp\/v2\/posts\/699\/revisions"}],"predecessor-version":[{"id":700,"href":"http:\/\/www.tech-nico.com\/blog\/wp-json\/wp\/v2\/posts\/699\/revisions\/700"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.tech-nico.com\/blog\/wp-json\/wp\/v2\/media\/701"}],"wp:attachment":[{"href":"http:\/\/www.tech-nico.com\/blog\/wp-json\/wp\/v2\/media?parent=699"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.tech-nico.com\/blog\/wp-json\/wp\/v2\/categories?post=699"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.tech-nico.com\/blog\/wp-json\/wp\/v2\/tags?post=699"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}