Dear All,
Could you please help me.
I’m using RouterBoard 750, 2.38.
I connect all my computers 192.168.1.1/24 with port1. I wonder if I want to block computer A 192.168.1.10/24 to communicate with computer B 192.168.1.11/24 it’s possible to do that?
Please help!!!
Thank you
Do you mean that ether1 is connected to a separate switch where all your computers are connected to?
If that is the case, what you want is impossible since the communication between the computers does not travel over the RouterBoard. This traffic is handled by the switch
It is very easy to do this with the right switch. It’s commonly called Layer 2 isolation. Cisco calls it Private VLANs.
Many RF solutions do this as well - it’s a great way to use one subnet but isolate all the hosts from each other
really thanks for you replay !!!
But I’m using with a normal switch connected to ether1 (192.168.1.1/24) and all my computer connected to that switch , and i wonder if the Mikrotik can block all the communication from Computer A 192.168.1.10/24 to Computer B 192.168.1.11/24.
Super Thank you all.
No - with a standard switch the traffic between hosts at 192.168.1.10 and 192.168.1.11 will (assuming both hosts have netmasks 255.255.255.0) travel via the switch and the RouterBoard will not be involved in the path therefore will have no control over the traffic.