Hi,

I have a routerboard 1100AH with v6.34.1,

How make a client isolation on DHCP server ? an option ? Firewall ?

Thank you for your help


Best regard.

Hi , Isolate from what?? If you wanna deny or restrict its communication yes firewall is a good choice or maybe u can block dhcp request from specific ip or mac address with bridge firewall

Hi , Isolate from what?? If you wanna deny or restrict its communication yes firewall is a good choice or maybe u can block dhcp request from specific ip or mac address with bridge firewall

Hi ShayanFiroozi,

I'd like customers on a local network can not see them (which is a public hotspot).

before I used a router at N4100 Zyxel, there was an option to check isolation 2 layer for that.

you can allow your hotspot users to communicate with hotspot gateway in firewall , then deny any packet is going to communicates in your hotspot subnet , so users can not communicate with each other

** i'm not familiar with hotspot , of course there is a better way to do that , waiting for experts....

you can allow your hotspot users to communicate with hotspot gateway in firewall , then deny any packet is going to communicates in your hotspot subnet , so users can not communicate with each other

** i'm not familiar with hotspot , of course there is a better way to do that , waiting for experts....

Thank you for that answer, but I do not know how make this in the firewall ...

Someone to help me?

Best regard.

you can allow your hotspot users to communicate with hotspot gateway in firewall , then deny any packet is going to communicates in your hotspot subnet , so users can not communicate with each other

** i'm not familiar with hotspot , of course there is a better way to do that , waiting for experts....

Thank you for that answer, but I do not know how make this in the firewall ...

Someone to help me?

Best regard.

If your users are on wireless so disabling default forwarding feature in your wireless card may help you without any firewall rules ,

but if they are not this could help :

/ip firewall filter
add chain=forward comment="Allow Gateway" dst-address=192.168.10.1 src-address=\
192.168.200.0/24
add action=drop chain=forward comment="Deny Users Comminication" dst-address=\
192.168.200.0/24 src-address=192.168.200.0/24

for example your hotspot gateway is 192.168.10.1 and your hotspot subnet is 192.168.200.0/24