Help with firewall rule - Deny access to internet from vlan

Hi Guys,

im sorry but i cant seem to work this out.. basically i just want to deny access to the internet on a certain vlan.. i have my switch connected to Vr0 and my modem on Vr1 and all i want to do is drop packets if say “VLAN number 27” try’s to go through Vr1.. any help would be much appreciated :slight_smile:

Not much detail to go by. You have a VLAN interface somewhere on the router. Let’s assume it’s called ‘vlan27’. You also have a WAN uplink interface. Let’s assume it’s called ‘WAN’.

/ip firewall filter
add chain=forward in-interface=vlan27 out-interface=WAN action=drop