I am trying to block inter vlan routing in my CCR Router . I have a trunk port established between a CCR Router and Edgepoint switch.
I am new to firewall and mikrotik systems . Could any one help to set up the configuration so that I can block inter vlan routing .
My CCR router have a trunk port with 3 vlans , vlan100, 200 and 300 .
As of now traffic goes between these vlans . I need to block traffic between vlan100 and 200 , vlan 200 and 300 , vlan300 and 100 etc .. ie ..completely block inter vlan routing and
I just want to establish connecting between same vlans , ie vlan100 - vlan 100 (10.100.1.1 and 10.100.1.2)
That’s easy. Create firewall rules to drop packets from one VLAN to another. For example:
chain=forward action=drop in-interface=E3-p5_201 out-interface=VLAN_205 log=no log-prefix=“”
chain=forward action=drop in-interface=VLAN_205 out-interface=E3-p5_201 log=no log-prefix=“”
The first line will drop any packets from ethernet port 3 (which is my 201 LAN and has a physical port on this router) that would otherwise exit the router on interface VLAN_205 (which I’ll bet you figured out is my 205 LAN and is part of a trunked port). The second line will drop packets going the opposite direction.
If you want certain devices to be able to cross VLAN boundries, create a firewall rule that specifically allows that device and place it before the drop rules.