I have setup a network with 3x VLans using Mtk 450 and Dlink Layer 2 switch.
I would like to limit access to a single IP on Vlan10
I have tried a 1st rule in Ip Firewall chain=forward, dest IP=10.0.10.10, in interface=Vlan 11, out interface=vlan10, action=drop
I expected that this rule would block all traffic to 10.0.10.10 … But it does nothing
It is a server on Vlan 10 which I only want users on Vlan 10 to access data on it.
However with the below mentioned filter I am still able to ping and explore the server from all Vlans
Also there is a printer on Vlan 12 which the server would need to print to. If possible maybe only allow printer fixed ip from vlan 12 to vlan 10