I posted a thread once before regarding a project I was working on, but apparently I wasn't doing it correctly, so I'm here to ask for your assistance in configuring my MikroTik RB2011UAS to isolate two different sets of network traffic.
My current setup is simple. I have one large network at 192.168.3.0 and everything connects into two Netgear unmanaged switches. These two switches plug into port 2 and 3 in the MikroTik. Switch 1 connects all of our internal office machines and printers, while Switch 2 connects all of the cat5e cables that run to our workbenches where we repair client computers in-house.
We would like to separate these two switches so that their network traffic is independent of each other. Basically, we don't want client computers in the lab to have access to our internal office machines, and vice versa. Ultimately we want to end up with the internal machines on the 192.168.3.0 network, and lab devices on the 192.168.4.0 network. Both of them need to have Internet access, but they need to act as though nothing else is connected to the MikroTik except the switch and the internet connection.
Could someone please point me in the right direction on how to accomplish this? I originally set out to use VLANs for this, but was told that the router will send tagged traffic along to the proper VLAN interface, but that I needed something within each network (like a managed switch) to tag the traffic before it reached the MikroTik. It was recommended that I use filters to isolate the interfaces so that only ether1 and ether2 could communicate for the internal network, and the same with ether1 and ether3 for the lab network, however I don't know how to accomplish this.
I appreciate any help that you guys are able to give me in accomplishing this project. I'll also be handing out cookies for those who are extra helpful