I have MT connecten via WAN port on internal network.
Main network: 192.168.1.x (main router/gateway: 192.168.1.252)
MT's network: 192.168.111.x (MT's IP: 192.168.111.111)
MT's wifi (hotspot) network: 192.168.222.x (MT's wifi hotspot ip: 192.168.222.111)
I want to isolate 192.168.1.x from MT's 192.168.222.x/192.168.111.x). MT's gateway on WAN port is 192.168.1.252.
I've created VLAN for MT's lan ports + wifi. Yet that seem not to do the job (perhapse because main network has no vlan @ all). Is VLAN actually a solution on this (without any changes on main network)?
For now I've just created a simple firewall rule:
But perhapse it would be better to separate traffic on interface layer instead?
Code: Select all
/ip firewall filter add chain=forward action=drop dst-address=192.168.1.0/24 log=no log-prefix="