V6.43rc45 Switch Port Isolation

[warn1ng]

Hi, i have a problem with this, as i read "Since RouterOS v6.43rc11 it is possible to create an uplink port and isolated ports. " i decide to make a lab test because this feature will be very usefull in our network, but is not working, Router behind port ether1-uplink as IP 192.168.20.1, and i am pinging from a netbook connected at port ether3 with IP 192.168.20.40, i made the test on a RB750r2

To configure switch port isolation, you need to switch all required ports:

/interface bridge
add name=bridge1 protocol-mode=none
/interface bridge port
add interface=sfp1 bridge=bridge1 hw=yes
add interface=ether1 bridge=bridge1 hw=yes
add interface=ether2 bridge=bridge1 hw=yes
add interface=ether3 bridge=bridge1 hw=yes

Override the egress port for each switch port that needs to be isolated (excluding the uplink port):
/interface ethernet switch port-isolation
set ether1 forwarding-override=sfp1
set ether2 forwarding-override=sfp1
set ether3 forwarding-override=sfp1

[orangetek]

I had the same problem on a 960PGS. It seems that this must be a bug because you can still do it in hardware on some devices using Switch->Rule tab. On your device it is not supported at all so you are out of luck. Mikrotik needs to update which devices support these functions.