Vlan in Mikrotik for access control?

Question

Mikrotik

Good afternoon, there is a rb2011 router configured on it vlan, a Mikrotik CRS326 switch is connected, everything works fine on ports, but it is possible to access each subnet and connect to balls, cameras, etc., how can subnets be distinguished?

Answer 1

Filter rules in the Firewall. Allow everything you can, drop everything else. It is recommended to do it in SafeMode

Answer 2

https://aacable.wordpress.com/2015/06/02/mikrotik-...
Section "Block communication between all or specific VLAN Subnet"