Firewall Within Same Subnet on WLAN

RouterOS Wireless Networking
1

Hi,

I’ve purchased a RB951Ui-2HnD router and want to implement firewalling within the same subnet on WLAN.

For example I have an SSID “Mikrotik_test” with subnet 192.168.90.0/24. I’ve got two stations with IPs 192.168.90.252 and 192.168.90.254 respectively. Both can access internet and each other. I want to create a firewall rule so that they are able to access internet but not each other. Disabling “Default Forward” in WLAN is not currently an option. I’ve created a firewall rule to this effect but it’s not working. My understanding is that the traffic is being switched and not hitting router’s CPU and that’s why the firewall rule is not working.

Please guide me how to resolve this issue.

2

Disabling “Default Forward” is the only way to accomplish this, traffic within the same subnet will be handled by the radio directly and not go through the CPU.