Johem
February 20, 2013, 11:37am
1
Hello!
Im about to buy a RB750GL soon and have never configured RouterOS before.
What would be the best configuration for the following setup?
LAN1: 172.16.0.0/32
LAN2: 192.168.0.0/32
WAN: Public dynamic adress
LAN1 and LAN2 shouldnt be able to access or see each other but be able to use WAN for internet access?
Regards,
Mikael
Is this correct?
LAN1: 172.16.0.0/32
LAN2: 192.168.0.0/32
Shouldn’t those be /24 subnets?
Johem
February 20, 2013, 12:06pm
3
Ohh sorry my misstake.
It should be:
LAN1: 172.16.0.0/24
LAN2: 192.168.0.0/24
OK.
/ip firewall filter
add chain=forward src-address=172.16.0.0/24 dst-address=192.168.0.0/24 action=drop
You can add another rule with reversed src-address and dst-address, but this should block packets both ways. It blocks the request one way, and the response the other.