Separate networks on RB 750

RouterOS Beginner Basics
1

My setup:
wan (ethr 1): 10.1.0.141/24
lan1 (ethr 2): 192.168.16.1/24 ; master port: none ; dhcp1 pool1
lan2 (ethr 3): 192.168.17.1/24 ; master port: none ; dhcp2 pool2
lan2 (ethr 4): master port: eth3
lan3 (ethr 5): 192.168.18.1/24 ; master port: none ; dhcp3 pool3
on ethr 1 srcnat/masquarade
Other default settings.
My problem is that all hosts are visible (for example I can ping hosts on 192.168.16.0/24 network from hosts on 192.168.17.0/24 network).
Is it possible to separate networks and how?
Thanks in advance!

2

http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/Filter
The shortest way to block all LANs from communicating:

/ip firewall address-list
add list=local-networks address=192.168.15.0/24
add list=local-networks address=192.168.16.0/24
add list=local-networks address=192.168.17.0/24
/ip firewall filter
add chain=forward src-address-list=local-networks dst-address-list=local-networks action=drop

Then move that rule to somewhere sensible in the existing rule set.

3

Thanks fewi, very elegant solution!

4

What do you mean by this statement? This is where I am at on my configuration as well. I used the new webfig and set up a Guest LAN on Ethernet Port2 (10.10.10.11-250) and Corp LAN on Ethernet Port3 (10.10.11.11-250).

The second thing I am failing to determine how to do is to set seperate external IPs for each of those networks. The ISP has given us 5 static IPs. I intend on allowing Guest to use one of those static IPs and Corp to use another static IP.

If only I had the $$$ to get certified…I could be so much more useful to everyone here.