Isolation client on Routerboard 1100AH

Hi,

I have a routerboard 1100AH with v6.34.1,

How make a client isolation on DHCP server ? an option ? Firewall ?

Thank you for your help


Best regard.

Hi , Isolate from what?? If you wanna deny or restrict its communication yes firewall is a good choice or maybe u can block dhcp request from specific ip or mac address with bridge firewall

Hi ShayanFiroozi,

I’d like customers on a local network can not see them (which is a public hotspot).

before I used a router at N4100 Zyxel, there was an option to check isolation 2 layer for that.

you can allow your hotspot users to communicate with hotspot gateway in firewall , then deny any packet is going to communicates in your hotspot subnet , so users can not communicate with each other

** i’m not familiar with hotspot , of course there is a better way to do that , waiting for experts…

Thank you for that answer, but I do not know how make this in the firewall …

Someone to help me?

Best regard.

If your users are on wireless so disabling default forwarding feature in your wireless card may help you without any firewall rules ,

but if they are not this could help :

/ip firewall filter
add chain=forward comment=“Allow Gateway” dst-address=192.168.10.1 src-address=
192.168.200.0/24
add action=drop chain=forward comment=“Deny Users Comminication” dst-address=
192.168.200.0/24 src-address=192.168.200.0/24

for example your hotspot gateway is 192.168.10.1 and your hotspot subnet is 192.168.200.0/24