Limit access to devices on subnet and different routers

[Sonic007]

Hi everyone,

 

I wondered if anyone could point me in the right direction as my brain is frazzled....

 

Setup is as follows......

Home Sky router with Wireless devices connected to it. I then have an Ubiquiti Edge router in one of the Sky routers LAN ports. This is configured with several seperate subnets on each port.

 

My objective is to stop devices on each router from seeing each other.

 

From a device on the Sky router things work as intended as in I cant see devices on the Edge's subnets.

 

If however I have a device connected to the Edge router then I can ping and see any device on the Sky router.

 

I assume this is becuase the Edge router can route everything through to allow Internet access via the Sky router but is there a firewall rule somewhere I've missed that will stop devices on the Edge router seeing those on the Sky router yet still let them access the Internet?

 

Or do I need to basically abandon that idea and use the Sky router as simply the net connection and stick a Wireless access point on one of the other Edge routers LAN ports and join my devices to that since those ports are already on different subnets amd camnt see each other?

 

Thanks.

[bald_pig]

I'd create a firewall rule that blocks all traffic to that subnet except the default gateway's ip.

[Sonic007]

I'd create a firewall rule that blocks all traffic to that subnet except the default gateway's ip.

 

 

That does make sense. I'll go and give it a go. Thankyou.