I am new to this type of networking products and is grateful for all the help I can get!
I have been recommended to use Rb2011il-In in order to solve my task.
I wish to have verified that this product can solve this, and tips on configuring the device. (enclose a picture of the topology) TOPOLOGY
Feel free to ask questions if anything is unclear!
Have you made a config for this?
Don’t use 2.4 GHz point to point links but 5 GHz links (tip)
If you have a configuration go to terminal and do export.
Paste the result here on this forum.
Hide sensitive information such as passwords.
I have familiarized myself with the menus on the Winbox now.
What I want to create is to connect my existing router (LAN) in Ether1 and then my Wi-Fi link on Ether2. This works with the default configuration as it comes with. But the problem is that I can access all devices from Ether2 available in Ether1 network. I want Ether2 only be able to connect to the Internet via Ether1s LAN without seeing what’s there (other LAN IP’s).
In Winbox go to IP, Firewall and make a new rule to drop the traffic from the neighbor network interface (source port 6 in your diagram) to your destination 192.168.1.0/24 internal network.
You need to remove port 6 from the group so it’s a standalone interface with address 192.168.2.1/24 . I’d think about moving this separate network to port 10. It then has a bit of logical separation and is easier to separate from the group by removing it’s slave status from the default master port of 6.
You also shouldn’t have out interface in the rule as the destination to be blocked is 192.168.1.0/24
I just reviewed your network diagram. You’ll need an allow for 192.168.1.1 before this block rule to pass the internet destined traffic. Normally the adsl routers can be bridged to enable the more flexible and powerful features of the RB2011 router to be utilized.
There’s a few configurations items from the default that you don’t need. The old address 192.168.88.1 is one. You also probably have a scrnat rule that’s no longer required.
You’ll need to add a default gateway on the RB2011 192.168.1.1 . You’ll also need to add a route on the ADSL router for 192.168.2.0/24 with gateway 192.168.1.99 the address of the RB2011.
These extra configuration items come about because you have 2 routers in the mix. Consider bridging the ADSL router so it acts as a modem and things get simpler. Later you can expand it back when you get a feel for the Mikrotik.