Hi all!

I've a structure with 6 RouterBoards each one with two wireless cards and connected by eth1 to my switch.

All of them are configurated as bridge with the eth1 and the boths wireless interfaces on the bridge ports.

The customers of the same wireless card cant see each other because of the "Default Forward disabled" But the clients connected on card1 can see the clients on card2 and all of them can see the traffic of the clients connected on another bridge.

How can I isolated the traffic between customers is all bridges?

Best regards

Fabrício

use bridge firewall, disable mac forwarding (for customer mac)

Hi Martini, how can I disable the mac forwarding?

Best regards

Fabrício

/interface bridge filter add action=drop chain=forward arp-src-mac-address=(customer mac) arp-dst-mac-address=(customer2 mac)

or create access rule for allowed mac to allowed mac and then add FROP rule for all other mac

Thanks Martini, but it's impossible to me... I'm talking in more than 1k clients

Regards

Fabrício

Then you need to use Vlan on routerboard and switch, make 2 vlan and bridge each of them with wireless interface.
And you problem solved )