So, as a beginner, I undestood that there is no need for a bridge If I want to isolate all ports of my RB5009 from each other?
What would be the simpliest config to make it happend?
Eth1 will be my WAN-port to the ISP and ports 2-7 should have access to the internet. Eth8 should be for management only. (And only from Eth8, no remote managenent access from internet).
I guess there should be DHCP and DNS for each port 2-7?
And firewall rules to isolate ports and keep everyhing safe from internet bad guys.
Eth2 network 10.10.20.0/24
Eth3 network 10.10.30.0/24
-------
And so on Eth8 10.10.80.0/24.
So what would be the simpliest way to do this? General ideas are welcome but I don't mind to have details!
There are so many ways to do things, VLANs from interface, switch and bridge. My goal is simple so I want simple solution. Do I even need VLANs?
So far I've been surfing with my mobile phone (4G) but soon I will have 100M connection to my apartment. (as a start, ISP can later offer 10G speed as maximum. But that is another story).
100M is quite slow so if a simple config is using a lot of CPU power, there should be no effect?
Later on I will try to make some other config for my future needs, bu at this point I will survive with the idea above.