I’m successfully setup a inter vlan routing with a rb450 and netgear smart switch, now I need isolate the traffic between vlans and of course the vlans can go to the internet.
Any help will be appreciated
This is a simple five liner (not a complete firewall) that would allow all the VLANs access to the Internet, but not access to each other. It assumes the Internet WAN interface is called ‘outside’. In English, the rules read “forward all packets in connections that were previously allowed”, “forward all traffic between router interfaces when the interface the packet would be sent out of is the interface named ‘outside’”, followed by “drop all packets”.
/ip firewall filter
add chain=forward connection-state=new action=accept
add chain=forward connection-state=related action=accept
add chain=forward connection-state=invalid action=drop
add chain=forward out-interface=outside
add chain=forward action=drop
This will affect my NAT?
Firewall filters have nothing to do with NAT (other than that NAT can change what IP addresses the router sees in different chains). I’m not sure I understand your question about NAT.