I try to configure mikrotik cap n2 with two networks HOME and GUEST. ETH1 port is connected to LAN port of home network. I configure bouth networks to have internet access. But I can not configure GUEST network to dissalow access to my local lan. I wan’t guest to have only internet access. How to do that or where can I get step by step howto?
/ip firewall filter
add action=drop chain=forward comment="drop Guest WiFi to internal" connection-state=new dst-address=<our private lan address space, for example 192.168.88.0/24> src-address=<your guest WiFi address space, for example 10.10.10.0/24>
Put this on top of your filter chain and no guest will be able to contact your internal network.
-Chris