Virtual AP's

RouterOS General
1

I have 3 virtual AP’s on a Mikrotik router. I added them all to the same bridge which has a DHCP server and Internet access. I want them all to be able to talk to the internet on pppoe-out1 but not able to talk to each other. Could I do something as simple as this for each VirtualAP?

/ip firewall filter
add action=drop chain=forward in-interface=wlan2 out-interface=!pppoe-out1

2

Just set a bridge horizon. Setting the horizon to the same value on ports stops them communicating.