What is the best way to isolate in MirkoTik, while not vlan?

Question

Computer networks

Hi everyone, in general, there is RB2011UiAS-2HnD-IN I
want to divide it into two isolated local networks like this: poor, etc. eth6 - network - 192.168.2.2-192.168.2.10 eth1 - the provider comes in the rest - 192.168.1.1-100
192.168.2.10 web server (just a test, to configure forwarding) outside on port 7777 on its 80
Ni in what the webserver does not see from the outside., what can I say about isolation)
From the inside, it goes to the network
Here is a screenshot for clarity, I'm a beginner, I apologize if I ask stupid questions)

Answer 1

Are you sure that the firewall or .htaccess is not blocking connections on your web server?
Why do you need a 2nd bridge if it has only 1 port?
Is there an entry in the Route List for Bridge 2?
there is no scr-nat entry for bridge 2.
You have a clear problem with DHCP on the 2nd bridge.

delete in your config posted above all MAC

admin-mac=14:4D:5C:67:XX:XX

Answer 2

Better right away, run the command in the terminal and post the contents of the config.rsc file here. After executing the command, the file will appear in Mikrotik's memory.
export file=config