Isolate OpenVPN clients in RouterOS?

Question

openvpn

Hello, the task is to isolate OpenVpn clients connected to Mikrotik. To not see each other on the network.
All connected to the same subnet 192.168.100.xxx. The addressing is dynamic. Is it possible to do this without writing firewall rules for each client?

Answer 1

Can someone help
The question was solved by adding one single routing rule

/ip route rule
add action=unreachable comment="Block VPN Client-to-Client access" dst-address=192.168.100.0/24 src-address=192.168.100.0/24

Through Winbox:
ip -> routes -> Rules ->
src. address (the network you want to close) 192.168.100.0/24
dst. address (to whom you want to block access to the above network) 192.168.100.0/24
action - unreachable

Answer 2

Is it possible to do this without writing firewall rules for each client?

For each client and it is not necessary - register at once for all.