my router is a 750GL,
I want to prevent hotspot customers to access my private network.
this is the network scheme:
a cable is connected from my private lan to the PoE port (1) of Mikrotik 750GL, and all other 4 ports (2.3.4.5) are for hotspot with 4 Access Point connected
on PRIVATE LAN PCs IP 192.168.1.x --- ADSL>192.168.1.30
on ROUTER 750GL:
Internet (WAN port): 192.168.1.60 GATEWAY: 192.168.1.30
Local Network (for hotspot): 10.1.0.1 with DHCP enabled
The problem:
I configured the hotspot and it works great but if a connected client with IP range 10.1.0.x open the browser and type for example http://192.168.1.30 or any other 1.x address on the private lan, he can reach the login page and is also possible to directly reach a shared PC with \\192.168.1.x. This is not so good!!
I'm not so expert and my question is:
exist a simple way to prevent this? maybe with a firewall rule?
thanks for "detailed" answer
