I'm building bridge firewall with RB450G on gigabit link using built in hardware switch, there are only 32 rules available which is not enough for this configuration.
So for this to work some traffic will need to go through RouterOS for additional filtering. Switch in configured on ether4 and ether5, uplink is on ether5.
For example, all traffic coming from 10.10.10.0/24 will need additional filtering:
Code: Select all
/interface ethernet switch rule add copy-to-cpu=yes disabled=no mac-protocol=ip src-address=10.10.10.0/24 ports=ether4 vlan-header=not-present
Any ideas ?