We are working on a possible setup for a sorority that wants a wireless setup. We want to be able to have users sign on for access (hotspot functionality) and dynamically be assigned a vlan so each user is on a seperate vlan to prevent file swapping and virus/worm spreads.
Is this possible with mikrotik?
Help is greatly appriciated
We may be adding something like this to v2.9 – but for what you want, you don’t have to have vlans. The RouterOS AP does has a setting “default-forward” for each wireless interface and you should set this to no, so that there is no MAC level access between all the clients and then you can still have all IP level access between them go through the ptp rules.
John
Ok sorry im still new to mikrotik. I see in the documentation default-forwarding (yes | no; default: yes) - to use data forwarding by default or not. If set to ‘no’, the registered clients will not be able to communicate with each other. so that will stop all clients from comunicating with eachother ie no file shares (windows that is) printer shares ect … right?
Does that just prevent wireless clients from talking directly with other wireless clients? Or would it also prevent a wireless client from talking directly with a wired client like an ftp server?
where can i see what the ptp is?
thanks