LAN isolation?

RouterOS Beginner Basics
1

what’s the firewall for LAN isolation?
i got simple configuration:

Bridge=port=ether2 ,one switch and 2-PC plug in by lan.

How can i isolate com1 and com2?

Thanks

2

If you want them isolated why put them on the same bridge..?

3

you didnt cake, one interface is on bridge.Let say ether2 is on bridge, the range is 192.1681.1/24.So i don’t like to give cance to the client to ping each othet

Thanks

4

That is not possible. The communication will be via the switch and will not go to the router.
(expensive switches sometimes have port isolation but when you have to ask, yours probably doesn’t)

5

Maybe you’re looking for bridge horizon (?)
http://nztik.blogspot.com/2013/11/mikrotik-bridge-horizon.html

6

That can only work when the 2 PCs each are plugged in to the MikroTik on a different ether port.
But as far as I understand, he has a switch connecting the two PC and the MikroTik.
So the “bridge horizon” has to be in the switch, and indeed some more expensive switched so have such a feature.
(port isolation, e.g. ports 2-24 can all communicate to port 1 but not between eachother)

7

Actually i’m looking for rule, and it will do port isolation, like a default forward in wireless.

Thanks

8

With an external switch: you have to do it in the external switch
With the internal switch: I don’t think that can be done
With the bridge: set an equal value in bridge horizon for the 2 ports