Hi
I developed this solution and I would have some advice if it's good or if it can be improved.
internet -->
router
192.168.1.1 -->
RB433 BS0 <--wireless--> RB433 BS1
--> eth1 --> PC
--> wlan1 Station
--> wlan2 AP Bridge
-->RB 411 CPE1
[admin@BS0] > /ip address print
Flags: X - disabled, I - invalid, D - dynamic
ADDRESS NETWORK BROADCAST INTERFACE
0 192.168.1.10/24 192.168.1.10 192.168.1.10 bridge1
[admin@BS0] > /ip route print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE
0 A S 0.0.0.0/0 r 192.168.1.1 1 bridge1
1 ADC 192.168.1.0/24 192.168.1.10 0 bridge1
[admin@BS0] /interface bridge host> print
Flags: L - local, E - external-fdb
BRIDGE MAC-ADDRESS ON-INTERFACE AGE
L bridge1 00:0C:42:28:52:B1 ether1 0s
bridge1 00:1C:A2:54:D2:84 ether1 0s
E bridge1 00:1D:0F:DF:CA:4D wlan1 0s
L bridge1 00:1D:0F:DF:D1:08 wlan1 0s
[admin@BS1] /ip address> print
Flags: X - disabled, I - invalid, D - dynamic
ADDRESS NETWORK BROADCAST INTERFACE
0 192.168.0.1/24 192.168.0.0 192.168.0.255 ether1
1 192.168.1.13/8 192.0.0.0 192.255.255.255 wlan1
2 192.168.100.13/24 192.168.100.0 192.168.100.255 wlan2
[admin@BS1] /ip route> print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE
0 A S 0.0.0.0/0 r 192.168.1.1 1 wlan1
1 ADC 192.0.0.0/8 192.168.1.13 0 wlan1
2 ADC 192.168.0.0/24 192.168.0.1 0 bridge1
3 ADC 192.168.100.0/24 192.168.100.13 0 bridge1
[admin@BS1] /ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat action=masquerade out-interface=wlan1
[admin@BS1] /interface> bridge host print
Flags: L - local, E - external-fdb
BRIDGE MAC-ADDRESS ON-INTERFACE AGE
bridge1 00:02:3F:6C:6B:FD ether1 0s
L bridge1 00:0C:42:28:52:AE ether1 0s
L bridge1 00:1D:0F:DF:B8:1F wlan2 0s
E bridge1 00:C0:CA:1A:45:C4 wlan2 0s
[admin@CPE1] > /ip address print
Flags: X - disabled, I - invalid, D - dynamic
ADDRESS NETWORK BROADCAST INTERFACE
0 192.168.0.1/24 192.168.0.0 192.168.0.255 ether1
1 192.168.100.100/8 192.0.0.0 192.255.255.255 wlan1
[admin@CPE1] > /ip route print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
DST-ADDRESS PREF-SRC G GATEWAY DISTANCE INTERFACE
0 A S 0.0.0.0/0 r 192.168.100.13 1 wlan1
1 ADC 192.0.0.0/8 192.168.100.100 0 wlan1
2 ADC 192.168.0.0/24 192.168.0.1 0 ether1
[admin@CPE1] > /ip firewall nat print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat action=masquerade out-interface=wlan1
I would not explain why with the same configuration, but when I used RB532 instead of RB433 I could assign a single IP address to BS1 wlan1 ex. 192.168.1.13/8 and then to put in bridge wlan2 -> bridge1 and everything was good.
With RB433 this does not seem to be possible for that reason I chose to assign a new IP address to the BS1 WLAN2, any advice?
Thanks Cetalfio