Hi,
We have two Cisco 2960 switch without any configuration , the acting just like a simple switch ! clients with different subnets connected to these switches , each switch connected to a mikrotik CCR 1016 router for firewalling , access control , routing and etc ...

problem is if one client from 192.168.1.0/24 network want to access to 192.168.2.0/24 network , packets do not going through my CCR Router , so no firewalling or Bandwidth controling could apply , besides client could change ip address or add an ip address and bypass my router.

could anyone help me with this scenario ?


Thank You

Can you give your CCR configuration here ?, at least /ip addr and /ip route, it will help us to help you..

yes i can , but that's not the point !! my problem is how to control packets from one subnet to the other in same Switch !!