Setting up NAT Mikrotik?

Question

Computer networks

Good evening! we have a router with PPOE. DHCP is also raised there, you need to connect another Mikrotik router, DHCP and all that to it .... The question is how to properly configure Mikrotik so that all local resources are not visible behind it .... that is, you only need Internet access ...

Answer 1

As I understand it:
microt 1 - main, main subnet
microt 2 - internal, its own subnet, connects through the first one and goes to the Internet
Solution - give microt 2 a static ip from microt 1 subnet, and then prohibit traffic between this ip and any other microt ip 1, except for the ip of the microt itself 1.
How to do this - google. At the same time, learn how to set up a microt. It is done through the firewall, prohibiting client-to-client in the local network.
There is another more correct solution - to make a second subnet or even give a separate port for microt 2, with its own ip for microt 2 and for this ip enable masgarding so that the Internet works. And prohibit communication in the firewall between wan microta 2 and the main LAN.