i have one question , why i can ping and shear other local network has different ip and gateway but they on same router each local network on different port
but in logical should can't ping and shear two local network have diffrent subnet and gatway

You answered your question yourself - the two networks are terminating on the same router. And without further notice (i.e. drop-rules), a router is doing what it is supposed to do. Routing.
If want to isolate the networks, add drop rules in the forward chain.
-Chris

2 separate networks with a router in the middle. The router is doing it's job.

You need to set up rules to stop them talking to each other.