Mikrotik, block access to local wifi client

Question

Mikrotik

Tell me, can anyone deal with a similar issue: it is necessary to block access to local resources only to one of several wifi clients. The Interface parameter in the Access List has no effect.
Router : RB951G-2HnD Ver.6.10

Answer 1

winbox -> ip -> routes -> rules ->
src. address (ip address or network you want to close) for example 192.168.0.1/24
drc. (ip address to whom you want to block access to the above network) 10.1.1.5
action - unreachable
Actually, he did this in order to block access to entire groups, for one subscriber he did not stay in the same network.

Answer 2

Start up it in other subnet.
Create for such cases 192.168.100.1-255 and start up there and not in the main bridge.

Answer 3

in order for the access list to work, you need to turn off the default authorization in the radio interface
if the network client is "not very groovy" then bind its mac to ip in the DHCP server, and then twist it as it should with this ip in the filter

Answer 4

And how to block the entire virtual WiFi Interface? I created two virtual WiFi, one purely for home hardware that needs to cut Internet access, and the other for friends / guests who need to be given only Internet access.