Isolate communication in the same LAN

Hello,

I have configured a MikroTik hotspot.

The hotspot network is as follows: 10.1.1.254/16

The MikroTik makes DHCP server and distributes addresses from this pool to users connected via the hotspot.

My question is: how to make sure that users on this same LAN cannot communicate with each other but still have access to the Internet.

The hotspot network is on a bridge, I have enabled Use Ip Firewall in bridge settings.

Is it possible to do this with firewall rules?

Thanks in advance to all.