I have a RB433 with 2 R52hn radio cards setup as a wireless guest access the wireless has it's own dhcp server setup thru the RouterOS. I also have the eth1, eth2 setup as a bridge with it's own dhcp server. The gateway is eth1 and is setup for dhcp client. Is there a way to prevent the wireless users from seeing traffic on the eth1 and eth2 ports. Thanks.

If wlanX with your hotspot have its own ip segment and are not bridged with your other interfaces, then ethX should be invisible to the guest users.

If you used the hotspot wizard to create a guest network it would tight down access to your router from this network.

If wlanX with your hotspot have its own ip segment and are not bridged with your other interfaces, then ethX should be invisible to the guest users.

If you used the hotspot wizard to create a guest network it would tight down access to your router from this network.

I checked my settings and the hotspot that is setup is on a separate network id but, I can still ping the pc's on the eth2 and eth3? Here is my dhcp list

0 dhcp_pool 10.10.100.0/24
1 dhcp_pool1 10.10.100.100-10.10.100.200
2 wlan_pool 172.16.100.100-172.16.100.200
3 dhcp_pool2 172.16.100.100-172.16.100.200
4 virtualAP-pool 172.16.200.20-172.16.200.100


I am able to ping from the 172.16.100.0 network to the 10.10.100.0 network.