Page 1 of 1

Stop traffic between Ethernet ports

Posted: Wed May 27, 2015 7:30 pm
by monkeybike
Hi,

Hope someone can help

How do you stop traffic routing between networks?

So Have a Microtik with 3 LAN's sharing same internet connection on ethernet 1

But how do I stop traffic so each internal LAN is seperate

i.e Ethernet 2 cant see the traffic on Ethernet 3

So ethernet 2 = 192.168.1.0/24

EThernet 3 = 172.16.1.0/24

I added a rule into Firewall filter to drop traffic between source 192.16.1.0/24 to destination 172.16.1.0/24 but I could still rdp a server though it?

Regards

Richy

Re: Stop traffic between Ethernet ports

Posted: Wed May 27, 2015 10:09 pm
by mocando
Hi,

Can you paste your firewall rules?

Re: Stop traffic between Ethernet ports

Posted: Wed May 27, 2015 10:35 pm
by jp
I have done this to make ether2 only able to send traffic through ether1 (gateway). Glad to hear other options.

/ip firewall filter add action=reject chain=forward in-interface=ether2 out-interface=!ether1

Stop traffic between Ethernet ports

Posted: Thu May 28, 2015 7:05 am
by jarda
If the lan ports are not in the same bridge just drop all from 2 to 3 and from 3 to 2 in forward chain. Put these rules high enough in the list. This should stop all traffic in between.

Re: Stop traffic between Ethernet ports

Posted: Thu May 28, 2015 11:50 am
by monkeybike
Thanks that has worked.

Richy