Page 1 of 1

RB532 Used as a switch, without broadcasting to all ports

Posted: Mon Jan 22, 2007 9:27 pm
by provoshane
I would like to setup an RB532 just as a switch for the time being, with traffic from ether 2 ONLY going to ether 1 and also, ether 3 ONLY going to ether 1. I am wanting to keep broadcast traffic from being broadcast from ether 2 to ether 3 and vice versa. I think that just bridging the ports will not be enough. Do I setup VLAN's between the ports or is there a different (better) way?

Posted: Mon Jan 22, 2007 11:47 pm
by jo2jo
you could just put each port on a different subnet / network .

and then block the traffic as you want throught firewall and mangle rules

that will only work and direct IP traffic..not other protocols.

im sure there are other prehaps better ways to do this as well.

Posted: Tue Jan 23, 2007 10:05 am
by nhalachev
Just add bridge interface, put all ethers on bridge.

Then use bridge firewall to prohibit traffic from ether2 <=> ether3.

Re: RB532 Used as a switch, without broadcasting to all port

Posted: Tue Jan 23, 2007 9:28 pm
by sten
I would like to setup an RB532 just as a switch for the time being, with traffic from ether 2 ONLY going to ether 1 and also, ether 3 ONLY going to ether 1. I am wanting to keep broadcast traffic from being broadcast from ether 2 to ether 3 and vice versa. I think that just bridging the ports will not be enough. Do I setup VLAN's between the ports or is there a different (better) way?
Depends on whether the users on the different ports are on different subnets.
If you bridge the three ports then you can add a bridge "forward" filter rule at the very top that says;

action=drop in-interface=!ether1 out-interface=!ether1

This will do what you ask in just 1 rule. If you need more help you can contact me offlist at; netslists (at) gmail (.) com
I'm in Florida and could use some extra income