this post was submitted on 12 Sep 2024
10 points (100.0% liked)

Mikrotik

177 readers
1 users here now

A community-contributed sublemmy for all things Mikrotik. General ISP and network discussion also permitted. Please ensure if you're asking a question you have checked the Wiki First: https://help.mikrotik.com

Mikrotik Rules: Don't post content that is incorrect or potentially harmful to a router/network.

This in itself is not a bannable offence but answers that are verifiably incorrect or will cause issues for other users will be edited or removed.

Examples: Factual errors - "EOIP is always unsecure" Configuration problems - Config that would disable all physical interfaces on a router Trolling - "Downgrade it to 5.26"

founded 1 year ago
MODERATORS
 

Hi,

I would like to assign different subnet to devices connecting to my switch/router Mikrotik (RouterOS v6.40).

To avoid devices connected on subnet 1 to reach devices on subnet 2 and moreover to disable access to the WWW on one of those two subnet

diagram

Is it possible with RouterOS to set the DHCP server to lease two set of ip (subnet) base on a Whitelist, meaning if a device is on the white list it get subnet1 if not subnet2 ?

Or do you have more practical solutions ?

Thanks.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 2 points 2 months ago

VLANs do this but on the same device.
Depends on what hardware you have I guess.
Actual bridges aren't really a thing these days, but unmanaged switches are still common, which are essentially just switches with all ports configured in the same VLAN that you can't change.
Whether you use dedicated physical devices or virtual LANs (VLANs) for the access ports where you connect you client devices, you'd likely still end up using different VLANs in whatever router or firewall you put inbetween those.
Yes, you can technically configure multiple subnets on the layer 2 broadcast domain, but that would be less secure and more prone to problems.