Community discussions

MikroTik App
 
User avatar
Valentin17
just joined
Topic Author
Posts: 1
Joined: Thu Dec 29, 2022 9:53 am

Mikrotik port isolation

Thu Dec 29, 2022 10:02 am

Hi all. :D
I am using Mikrotik HAP Lite router, i have a Nextcloud server connected to ethernet port 4, wan port connected to ethernet port 1, my LAN network with my PCs connected to port 2.
After first config of RuterOS i removed ethernet port 4 from bridge and configured port isolation so ethernet port 4 (nextcloud) can only comunicate with ethernet port 1 (wan).

So my question is this. Is this config enough so if someone hacks my nextcloud server that it can not gain access to my LAN home network and to my PCs that are connected to that network on ethernet port 2.

Thank you for all your help. I am very glad to be using Mikrotik router in my home network. :D :D
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19107
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Mikrotik port isolation

Fri Dec 30, 2022 8:10 pm

/export file=anynameyouwish ( minus router serial number and any public WANIP information)

Will have a look.
 
Guscht
Member Candidate
Member Candidate
Posts: 236
Joined: Thu Jul 01, 2010 5:32 pm

Re: Mikrotik port isolation  [SOLVED]

Fri Dec 30, 2022 8:51 pm

Id recommend to create a DMZ with VLANs. So you can connect to a device in the DMZ and the answer coming to from the DMZ to the LAN (belonging to the LAN to DMZ connection) is allowed. But no new connection form the DMZ to the LAN is allowed.

Who is online

Users browsing this forum: Bing [Bot], friend2809, toffline, zdiv and 35 guests