Blocking Ethernet clients from connecting to each other

[Denna]

Is there any functionality in Asuswrt-Rmerlin that would block Ethernet clients on the same router from connecting to each other ?

Is there an Entware add-on that would do that ?

 

[Zirescu]

Might be what you're after: https://www.snbforums.com/threads/f...guest-network-for-asus-merlin-rt-ac68u.18969/

 

[Denna]

@Zirescu ,

Thanks for finding this.

I haven't worked with VLANs and ebtables yet.

So does this mean that a new VLAN for ports 0-7 should be created and ebtables used to block traffic based on that VLAN ?​

 

[Denna]

Putting the initial question another way.

Let's say a client has malware installed on their PC.

Is there any way to prevent the malware from attempting to infect other devices connected to the router ?

Is this a job for something like Snort ?