Hi, I'm really new to this Mikrotik Routing World so I need some advice on this subject. I've recently bought a RB2011 to use as my main router in a building network. I've created some VLANS with a DHCP server for each subnet inside the vlans to serve IPs to the clients and it works as expected, the only problem that I have is that every client can ping each other besides they are on different subnets, even different VLans. I've read that by default Router Os route every packet, but I've created a Drop all rule on the first VLan and nothing happend. Then I've read that by default Router Os doesn't proccess VLans packets on the IP Firewall. So How should I configure the router so that no VLan can see each other but the all have acces to the internet gateway?
# NAME MTU ARP VLAN-ID INTERFACE
0 R 1A 1500 enabled 2 ether2
1 R 1B 1500 enabled 3 ether2
2 R 1C 1500 enabled 4 ether2
3 R 1D 1500 enabled 5 ether2