Hi guys,

Recently I bought a mikrotik wAP ac, and i have configured two virtual AP (client and guest) on interface WLAN1, and 
another two virtual AP (client and guest) on WLAN2 interface.

WLAN1 192.168.20.0/24
WLAN2 192.168.25.0/24

After some tests i can connect to all SSID´s, and i can get out to the web, and also can ping from 192.168.20.1(client on wlan1) the 192.168.25.1 (client on WLAN2) but I do not want that to happen.

How can i block the communication between SSID´s??

Thanks in advance.

Configure the same horizon value on the two port entries for wlan1 and wlan2 in the bridge.

Configure the same horizon value on the two port entries for wlan1 and wlan2 in the bridge.

Thanks for tip pe1chl.
I will try, then post the result.

So you don't want the two networks to communicate with each other - no matter if wired or wreless.

-Chris

When it is a routing setup that is indeed the correct method.  It appears I misread the IP addresses and believed it was a bridged setup.

So you don't want the two networks to communicate with each other - no matter if wired or wreless.

Code: Select all

/ip firewall filter
add chain=forward action=drop src-address=192.168.20.0/24 dst-adddress=192.168.25.0/24
add chain=forward action=drop src-address=192.168.25.0/24 dst-adddress=192.168.20.0/24

-Chris

Thanks for the help Chris!