How to share network space?

Question

Mikrotik

Good afternoon. There are two organizations in the same building, as well as mikrotik routerboard 2011uias, tell me how and how to break the network so that both organizations have Internet access, do not see each other's network, but at the same time have shared access to the DVR.

Answer 1

vlans to help you.

Answer 2

ether1 - WAN
ether2 - 192.168.1.0/24 - switch of the 1st organization
ether3 - 192.168.2.0/24 - switch of the 2nd organization
in the firewall settings, you prohibit traffic from one network to another. For the registrar, you can select a separate ether4 network - 192.168.3.0/24 or connect it to one of the existing ones and allow traffic for it from both subnets.

Answer 3

I will supplement my colleagues, you can also divide the network with routes, i.e. in Route Rule, create two rules, each for its own network interface of the local network, each rule will refer to its own routing table, which will contain only the local (for this interface) network and the default gateway - the provider. In this option, even setting up a firewall is not required, because. there will be no route to the neighboring network.