Firewall works but doesn't feel right

RouterOS Beginner Basics
1

This is my first day with Mikrotik (hap ac2).

So I followed this guide (https://www.youtube.com/watch?v=1ZJ-pM89N7o) and created several wifi VLANS (SSIDs: Family, Kids, Guest, Office, Staff). Each SSID has their own separate 192.168. address and dhcp server. Each VLAN only has 1 subnet.

I want isolation between VLANS, however devices within a VLAN are visible to each other. The following is how I achieved my goal.

It works but I’m getting the nagging feeling that I’m not doing it as I should.

This is the firewall address list

This is the firewall ruleset

Rule 0, 9-18 is the default from Mikrotik. My rule to block inter-vlan traffic is 2-8. It works, but is this the best practice?

I came from a prosumer unifi background and bought my first mikrotik gear (hap ac2) when I discovered the unifi router lacks granular traffic shaping abilities through its gui. Going from unifi to mikrotik, I feel my world has opened up in terms of flexibility and granular control, but everyone in this new world is a masochist.

2

Bridges involved?

3

Here is my bridge and port. Physical ports on the hap ac2 (eth1-5) are on default setting (on default lan 88.x). ether1 is WAN.

Thank you

4

Throwing guesses out there:

@ Bridge Settings
Use IP Firewall ? (and others+)
Allow Fast Path?
@ Bridge / [x/ ] VLAN Filtering ?

@ Ports / Port Settings
Hardware Offload ← (I know this has to be turned off under certain situations)

I don’t have anything to look at in front of so not sure.