Hi,
I’ve an RB951G-2HnD router and I want to know if it is possible to isolate a WiFi connected device
( a meteo station that connects to Internet to send meteo readings) in order to avoid that this device can access other devices in the LAN while continue accesing router to exit to Internet.
The Wifi is formed by various Devolo PowerLine devices (not using RB951G WiFi but a solution using this wiFi will also be welcome).
Thanks in advance
to isolate all wifi stations
With MikroTik devices you can create an additional “virtual AP” where you can configure a separate SSID and password,
and connect this to a separate subnet (with its own DHCP service) which can forward only to internet and not to the LAN.
To do this is more complicated than with typical end-user devices because you need to understand what you are doing,
it is not a matter of clicking through some wizard. However, the newer RouterOS versions do have support for a
“guest network” that you could use for this.
The only way to do this on mikrotik side only (and the easiest way overall) is to enable wlan on mikrotik solely for this device, exclude wlan interface from the bridge and add a firewall rule that will drop everything from this wlan interface to the rest of the lan.
Otherwise you need to look for info about what are your Devolo APs capable of, and most likely setup a vlan running from mikrotik to one (or all) Devolo APs.
And that’s possible only if they can vlan-tag the traffic on some criteria at all.
You can use Wireless Access List with VLAN.
You can even have a Private Pre Shared Key.