Hello,

One of my clients is providing internet access from their router to a nearby business.

I am using a Er605 router. Network cable coming from switch of company suppling internet access is plugged into Er605 giving it internet access and a new IP subnet for business 2.

Problem is business 2 should only be receiving internet access from business 1 and the LAN sides should have no access to each other.

I am trying to block LAN access from the incoming WAN port IP range.

Incoming WAN range - 192.168.178.1

New LAN range on er605 is 192.168.0.1

Problem is 192.168.0.1 has LAN access to 192.168.178.1

I need it to get internet on WAN port but not to have LAN access to WAN port ip range.

I have tried creating ACL's and everything but cannot get it to work.

Regards