I have a lab setup with a MT rb433 with 1 wireless card in AP Bridge that is supplying DHCP to 2 clients. I am trying to keep client 1 from being able to see client 2’s router. When I torch the wlan (AP) interface I do not see any traffic from client 1 to client 2 when I am running steady pings. I understand that they are in the same subnet and don’t need to use the default gateway to get to each other from a network stand point, however the only physical connection they share to each other is the AP, so i do not understand why that traffic is not showing in the wlan interface when I torch. Maybe the picture will help you understand what I am trying to accomplish.
Current 172.16.2.2 (client 1 laptop) is able to ping 172.16.2.3 (client 2 router). I am testing a way to block client to client communication. I figured this would be a simple firewall filter rule and that would be it, however when the rule did not work, I torched the wlan interface and I don’t see the traffic passing through the wlan at all. Does anyone know how to help me with this. Thank you in advance.
It’s forwarded directly on the wireless chipset, which is why traffic isn’t being seen in the firewall.
default-forwarding (yes or no; default value: yes) : This is the value of forwarding for clients that do not match any entry in the access-list.
http://wiki.mikrotik.com/wiki/Manual:Interface/Wireless
Set that to no, or create access lists for the two clients that set the ‘forwarding’ property to no:
forwarding (yes or no) :
no - Client cannot send frames to other station that are connected to same access point.
yes - Client can send frames to other stations on the same access point.
http://wiki.mikrotik.com/wiki/Manual:Interface/Wireless#Connection_properties
I was waiting on you to answer that fewi. figured it would be something simple. ty sir.