Hello,

I'm trying to use VRF to separate network in many routing tables but when i put an interface in a VRF. Other network device can ping this IP address and from the Mikrotik, i can ping others devices but i don't have access to the Mikrotik's Web interface by example or no SSH. I don't have firewall rules.

Any idea ?

Many Thanks.
Best Regards

Can you post an export for the router?

Router management protocols work only in main routing table.

I have a similar problem. I attached the topology.
The two main Mikrotik routers have VRFs.
The problem is that any of the PCs of the different VRFs can ping any vlan interface of the main Mikrotik routes.

"Tengo un problema parecido. Adjunto la topologia.
Los dos routers Mikrotik principales tienen VRFs.
El problema que se tiene es que cualquiera de las PCs de las distintas VRFs puede hacer ping a cualquier interface vlan de los routes Mikrotik principales."

I have a similar problem. I attached the topology.
The two main Mikrotik routers have VRFs.
The problem is that any of the PCs of the different VRFs can ping any vlan interface of the main Mikrotik routes.

"Tengo un problema parecido. Adjunto la topologia.
Los dos routers Mikrotik principales tienen VRFs.
El problema que se tiene es que cualquiera de las PCs de las distintas VRFs puede hacer ping a cualquier interface vlan de los routes Mikrotik principales."

This is a known issue with VRF's. You will have to use firewall filters.