Vlan & Dhcp Problem

RouterOS General
1

Hi,

I bought a rb2011 for production use and a rb750 for testing.
On the rb2011 I set up 5 Vlan, each on one trunk port and a seperate Access port. Each Vlan has it’s own Dhcp Server,
unfortunatly I can still ping from any vlan into a different vlan.

Now I started to do all testing on my rb750, I followed this Guide:
http://sygard.no/2011/09/vlan-access-ports-on-mikrotik-routers/

Eth3 → trunk port
Eth4 → vlan4 access port
Eth5 → vlan5 access port
Bridge4 → vlan4 & ether4
Bridge5 → vlan5 & ether5

Now, connecting a PC to each of the ether4 & 5 Ports with a static IP, I am not able to ping any of the other PC’s on the different Subnet / Vlan.
But now, when I add a separate Addresses (bridge4: 192.168.40.0 | bridge5: 192.168.50.0) for each Bridge, I am now able to ping the other PC.
What am I doing wrong?

2

Your router will route between the vlans (subnets) if the router is the the gateway for the subnets.

3

That makes Sense, thank you.
Would I have to set a Firewall rule to prohibit routing between vlans, or what’s the best way to accomplish it?