hi everyone,

I have 2 LANs using simple 8 port non manageable switches.I've connected these switches to another simple 5 port switch and then connected it to my VPN-Server LAN Card.
the problem is that users of each LAN can see the other LAN users.
recently I've got an RB750 and am going to use it instead of the central 5 port switch.
is there any way to isolate these 8 port switches users from each other.
ports on rb750 are going to be used as follows:

ether2 is connected to VPN Server
ether3 is connected to 8 port switch(LAN 1)
ether4 is connected to 8 port switch(LAN 2)

Thanks a lot

In case ether3 and ether4 are not switched together, you can try to use IP firewall filter to isolate LANs. For example,

thanks for your answer,

but what if we use the ports as slaves for the ether2.
or if we use pppoe concentrator instead of VPN server.
in these situations is ther anyway to isolate ports?

Regards

I have a similar configuration. Why not assign the three to different subnets and then used a variety of firewall rules to allow port3 and port4 to see port2 but be invisible to each other.

Such as:

Port2: 192.168.88.x
Port3: 192.168.77.x
port4: 192.168.66.x

Then add firewall rules, such as given in the earlier example. Just make sure to include rules that allow the communication between ports2 & 3 and ports2 & 4.

I'm not sure how it would work with pppoe, however. (I'm new myself)

RB750 switch does not have advance packet filtering, so it is impossible to isolate networks (it is still possible to isolate VLANs). You can try to use bridge instead of a switching. With "/interface bridge settings set use-ip-firewall=yes" you can use IP firewall.

Thanks again for your helpful answers,

Finally I've made a bridge and assigned 2,3,4,5 ports to it and in bridge filter rules added 6 rules to isolate ports 3,4,5.
but if i were using a rb493 and wanted to isolate ports 2 to 9 there must be 56 rules!!!!.

I've googled the forum for similar threads and have found port-based vlan solutions which did not work for me.
the problem is there is nothing like /Interface ethernet switch in the rb750. recently I've got a Rb450g and a rb493ah, and there is no switch Item in them too.