Hi,

I have a "Mikrotik hEX RB750Gr3 5-port" connected to my router (192.168.1.x). So, the Mikrotik device will have an address of let's say 192.168.1.134 on my routers LAN. Now, when I connect a device to the Mikrotik switch I've given a LAN address of 192.168.88.x for my connected device. Everything works fine. But, how can I make sure nothing can travel upwards to my normal LAN of 192.168.1.x? Firewall rules? Something like: Also, the devices on my normal LAN of 192.168.1.x can ping the Mikrotik device: 192.168.1.134. Is that okay?

Firewall rules? Something like:

Code: Select all

/ip firewall filter
add chain=forward action=drop src-address=192.168.88.0/24 dst-address=192.168.1.0 /24

Yes, precisely

Also, the devices on my normal LAN of 192.168.1.x can ping the Mikrotik device: 192.168.1.134. Is that okay?

Yes, it's perfectly normal