Router, Route traffic in one way ? (programming.dev)

submitted 2 weeks ago by Corsair@programming.dev to c/mikrotik@lemmy.world

4 comments fedilink hide all child comments

Hi,

Is it possible in a router to route traffic from one specific node ( here the laptop to the DVR) but not the other way around ( DVR to 192.168.10.0/28 ) ?

        192.168.10.1/28             
            ┌──────┐                
            │laptop│                
            └───┬──┘                
                │                   
                │                   
                │                   
                ▼                   
             ┌──────┐               
        ┌────┤router├──┐            
        │    └──────┘  │            
        │              │            
        ▼              ▼            
     ┌──────┐        ┌───┐          
     │server│        │DVR│          
     └──────┘        └───┘          
192.168.10.2/28      192.168.20.1/28
                             ──

Meaning, I want to keep the DVR in it's subnet only. But allow the laptop to reach it.

Thanks.

top 4 comments

sorted by: hot top controversial new old

[-] fraksken@infosec.pub 2 points 2 weeks ago

Yes. With either VLAN or simple firewalling.

[-] Corsair@programming.dev 1 points 2 weeks ago* (last edited 2 weeks ago)

Thanks @fraksken@infosec.pub

with Firewall I get how to do it, but with VLAN ??
I was thinking an access port could be only on VLAN at the time no ?

[-] fraksken@infosec.pub 1 points 2 weeks ago

Port trunking allows a port to allow multiple VLAN tags to pass over it.

[-] Corsair@programming.dev 1 points 2 weeks ago* (last edited 2 weeks ago)

a more accurate diagram of what I'm targeting..

┌──────┐       ┌───────┐         ┌───┐  
│Node 1│       │Node 2 │         │DVR│  
└──┬───┘       └┬──────┘         └─┬─┘  
   │            │                  │    
   │            │                  │    
vlan10         vlan10             vlan20
   │            │                  │    
   └─────────□  □  □───────────────┘    
             ┌───────────┐              
             │hEX refresh│              
             │E50UG      │ □            
             └───────────┘              
                 □                      
                 │                      
                 │                      
                 │                      
              trunking                  
                 │                      
                 │                      
                 │                      
                 □                      
               ┌───┐  □                 
               │hEX│  □                 
               └───┘  □                 
                      □

□ = port

So it should be possible for Node 1 to reach DVR ? Either trough Firewall or VLAN rules ?

this post was submitted on 06 Jun 2025

5 points (100.0% liked)

Mikrotik

365 readers

1 users here now

A community-contributed sublemmy for all things Mikrotik. General ISP and network discussion also permitted. Please ensure if you're asking a question you have checked the Wiki First: https://help.mikrotik.com/

Mikrotik Rules: Don't post content that is incorrect or potentially harmful to a router/network.

This in itself is not a bannable offence but answers that are verifiably incorrect or will cause issues for other users will be edited or removed.

Examples: Factual errors - "EOIP is always unsecure" Configuration problems - Config that would disable all physical interfaces on a router Trolling - "Downgrade it to 5.26"

founded 2 years ago

MODERATORS

rayman30@lemmy.world