I’m trying to configure the following and am looking for suggestions on the best way to handle it. My only requirements for each location is that each segment must be rate limited and that the connections at each location are on the same network (all CPE routers are on the same network and able to communicate between themselves) - any ideas?
If I wanted to segregate all the traffic on the interfaces with blue cables from the traffic on the yellow cable interfaces, would i need to apply VLANs on the interfaces with red ethernet cables and then bridge with the individual appropriate interfaces at each site?
This is working - addresses assigned to the bridges (containing both external and VLAN ports) are reachable from the other Mikrotik devices - my problem is for some reason, I’m able to reach the address assigned to the opposing VLAN at the “core” Mikrotik (Location 1).
For example, Location 1 has 192.168.168.1/24 assigned to the blue cable VLAN bridge; 10.10.10.1/24 to the yellow cable VLAN bridge. Location 2 has 192.168.168.2/24 on blue, 10.10.10.2/24 on yellow. From the client on the blue cable at location 2, I’m able to ping 10.10.10.1. I am unable to ping the opposing vlan address at the “local” Mikrotik (location 2).
I’m assuming I’d need some kind of bridge or firewall filter but have been unable to figure out as of yet - any ideas?