Client Isolation - Wired and Wireless

RouterOS General
1

Hi,
Thank you for your assistance already.
I need to isolate communications from one specific VLAN, for security reasons. On the same VLAN, I have wired and wireless devices.

For my understanding, to isolate one wifi device from another wifi device at the same VLAN, we need to set this flag on the datapath of that SSID:

client-to-client-forwarding=no

Is that correct?
Now, how about the wired devices on the same VLAN on a Mikrotik switch CRS328-24P-4S+

Thank you

//Gustavo

2

Hi,
You probably want the private vlan feature.

https://help.mikrotik.com/docs/display/ROS/Switch+Chip+Features#SwitchChipFeatures-PrivateVLAN