I use Mikrotik in AP mode. RouterBOARD 532 and one wireless card (SENAO NL-2511MP+ Mini-PCI Adapter Prism).
I configure a bridge (bridge1) and put the LAN and the WIR interface to it.
Configure the WIR interface:
mode: AP_bridge, SSID: AP1, Band: 2.4Ghz, freq: 2457 and the default setting.

It's work fine , I can connect to it from my wifi notebook. I try to connect other notebook and it's work fine. I can reach the notebook 1 from the notebook 2. Is there any method to limit this? I don't like users to overload my AP with their file transfer. So can I limit this connection?

AP <-> User 1 ---- OK
AP <-> User 2 ---- OK
User 1 <-> AP <- > User 2 --- DENIED

So where am I search?

Thank you in advice!


Santajosh

Try seting default forward to off and this will block interclient traffic

Thank you for the fast answer. But where can I found this?

My another morning idei to do a forward rulle in the firewall

accept forward 192.168.0.0/16 to ETH on WIR interface ( If it's possible to add in to the firewall menu...)
drop all

If your using the accesses list, you need to turn it off for each client there as well.
You don't actually use the <> in the examples above. Just the number.

Dan

I instail and Ap with routerbaord 230 and is runing on Mikrotik 2.9.10 is there any way i can do MAC Address filtering for other client that will connect to it so that those who there Mac adress are not on the list will not asociate with the AP? please i need help

I instail and Ap with routerbaord 230 and is runing on Mikrotik 2.9.10 is there any way i can do MAC Address filtering for other client that will connect to it so that those who there Mac adress are not on the list will not asociate with the AP? please i need help

Yes. I am a nooby as well but I just use the winbox tool. Click on wireless, click on access list, click on the + symbol, put in the mac address.

Thanks it work with i use it with arp=reply-only so that they can not be changing there ip address thanks a milliom