Differences

This shows you the differences between two versions of the page.

--- networking:router:mikrotik_guest [2015/06/25 11:45]
gcooper
+++ networking:router:mikrotik_guest [2015/06/25 11:47] (current)
gcooper
@@ Line 5: / Line 5: @@
 **Additional Info**: http://forum.mikrotik.com/viewtopic.php?t=81061
-:!: If you need any wired ports to be part of the guest network, you'll need to create a bridge (like ''br-guest'') and bridge the guest vAP to the desired Ethernet ports and adjust the howto steps as necessary.
+:!: **If you need any wired ports to be part of the guest network**, you'll need to create a bridge (like ''br-guest'') and bridge the guest vAP to the desired Ethernet ports and adjust the howto steps as necessary.
-:!: The existing NAT (masquerade) rule may be sufficient to NAT both the LAN and the Guest networks.  For example, if the existing NAT rule masquerades all traffic going out ''ether1'', that is probably sufficient for both networks.
+:!: **The existing NAT (masquerade) rule may be sufficient to NAT both the LAN and the Guest networks**.  For example, if the existing NAT rule masquerades all traffic going out ''ether1'', that is probably sufficient for both networks.
+:!: **To block traffic between guest and private networks**, we must **use "forward" chain**, not "input".

Virtual Architects Support Wiki