Hi,
I am not able to find an answer how to do that.

- I have small network 192.168.0.0/24
- A few users using IP from that IP range

eg.
User1 range - 192.168.0.11 - 192.168.0.20
User2 range - 192.168.0.21 - 192.168.0.30
user3 range - 192.168.0.31 - 192.168.0.40

I need to set some FW rule to separate users ranges.
User1 will see IP's just from user1 range, user2 will see IP's just from user2 range etc.

Thanks a lot.

If they're on the same broadcast domain you can't filter on the router. On Ethernet broadcast networks clients on the same broadcast domain talk to each other directly, without involving the router. With that many users I'm sure not all of them are bridged to the router, and some can reach each other directly through a switch.

Buy switches that can do this for you.

Hey ,

Wish you are fine.

You can solve it by dividing the users into 3 sub nets

User 1 192.168.0.1/29
user 2 192.168.1.1/29
user 3 192.168.2.1/29

In the firewall nat do mascorade for each sub-net .

In this case each user is separated.

Good Luck