Firewall for ROS device used as internal switch?

RouterOS General
1

Hello all! I installed one CRS112-8p-4s-in as internal PoE switch.

I have set up some input protection, and was wondering if I also needed to put forward rules in the firewall?

/ip firewall filter
add action=accept chain=input comment="allow established, related" connection-state=established,related
add action=accept chain=input comment="aallowed to router" src-address-list=allowed_to_router
add action=accept comment="allow ICMP" chain=input protocol=icmp
add action=drop comment="drop everything else" chain=input
/ip firewall address-list
add address=10.10.10.1-10.10.10.254 list=allowed_to_router

Thanks

2

No, if the device is configured as a switch it doesn’t forward any IP packets.
You can even disable IP forwarding in IP → Settings.

3

Thank you.