Hotspot firewall to block ether1

Hardware MikroTik hardware general
1

Hi,

At the moment when a user connects to the hotspot network they have full access to all of the devices from the DHCP range (192.168.0.x) how do I block LAN access from hotspot clients?

Thanks in advance.

2

its normal . any client from one range like 192.168.0.x/24 can see and access each other and its not related to mikrotik firewall . because mikrotik probably is your gateway and its firewall manages the traffic that is going out of your network not the same ip addresses of client.

3

In this instance the Mikrotik picks up and address on ethernet port 1 of 192.168.1.4 and issues hotspot addresses on 192.168.88.0/24.

A device with the address 192.168.88.3 can access all of the devices containing 192.168.1.x…

is this normal?

4

Yes, this is normal routing behavior. You can set a firewall rule or configure blackhole / unreachable routes if this is not what you want.