Blocking Subnets from talking to each other

RouterOS General
1

Hello, I’m trying to figure out if there’s an easier way of blocking subnets from talking to other subnets.

Ex:

  • Client 1: 172.16.5.1


  • Client 2: 172.16.6.1

I have about 33 vlans currently configured on the mikrotik ranging from 172.16.1.1 - 172.16.33.1, with various address, but I’m able to ping devices outside of my subnet. I understand the default gateway being pingable, but is there anyway I’m able to have these subnets isolated, and not able to ping clients in different subnets?

Thanks.

2

Check this
http://forum.mikrotik.com/t/drop-traffic-between-interfaces-without-using-vlans/159975/5

3

If the last rule in your forward chain is
add action=drop chain=forward,

then any traffic you dont state to be allowed above this rule will be blocked including all VLAN to VLAN Traffic.
Notice I said traffic. You cannot prevent pinging of a Ip address of the subnet but thats not accessing any data, users, or servers etc…