Thank you George, this was driving me nuts. I had used quickset to set up a wireless bridge with a Mini Hap and I could never get back into the settings using the IP. Adding the bridge to the interface list did the trick.

I'm not exactly sure what model router you have. I have a RB750Gr3. With this model, the default setup is for eth2-5 to be grouped into a switch. You could simply remove say eth5 from the switch group, assign a new subnet and DHCP server to eth5, and run all your IoT devices off that interface. You...

Since this is a home system, my biggest concern is really not guest users, but all the IoT devices "phoning home" if they shouldn't (cheap webcams have very poor security, and there is no telling what vulnerabilities are built into the code). But it would be nice to prevent curious guests ...

Thanks for the explanation. What I understand you to be saying is that since both trusted and untrusted IPs will be coming in through the same interface on the wireless (unless I set up a second physical AP dedicated to each subnet), that even if they are assigned ips from different subnets, I still...

Thoroughly frustrated and would appreciate some help. Have a vanilla sb750 setup with basically the default configuration and an added wireless accesspoint: Mikrotik Network Diagram.PNG I would like to lock the network down so that IoT devices can only talk to the Raspberry Pi server, and untrusted ...

I have set up a web camera on my mikrotik home network, but my wife cannot view it at work because they have all outgoing ports except for 80 blocked. If I map 80 to the webcam she can see it fine, but I would rather not dedicate and expose the camera as the homepage on port 80 to the outside world....