Bridge Filter on SXT to drop local traffic

Hi All

Im running a L2 bridged Hotspot network at a site. Its a small site with 23 holiday lodges. Each lodge has an SXT outside, feeding an RB751 internally. Theres an APPLE TV also connected to the RB751.

The SXT is connected in Station-wds mode to one of 3 access points using a connection list.

I need to be able to drop traffic at the edge of lodge (IE, on the SXT) to stop network discovery working, but can’t seem to get this working.

All the APS are set to NOT default forward, but a quick scan shows all devices on the network.

I realise if this were a wired network I would be pretty much out of luck, but was hoping that as Im using the SXT’s I could intercept and drop traffic via the bridge filters.

Any idea on how to achieve this?

Network range is 10.10.210.0/23

Any particular reason you are running WDS?

Seems NAT at the CPE would take care of your problems.

Disabling the bridge while running WDS is disabling the reason to use WDS.

Im not looking to disable bridging.

There’s a pesky Apple TV in each lodge, connected to an RB751 in the lodge. Idea is that a holiday maker connects to the RB751 and can send stuff to the Apple TV to watch on the main TV.

Problem is , its showing all Apple TVs on the network so im trying to block the apple TV discovey etc from passing over the wireless bridge.

I need a central hotspot controller, which handles client connection, lawful intercept etc, and has radius mac authentication to allow the Apple TVs and Smart TVs though. I was led to believe I need a L2 network for the hotspot service to work.

Look at /interface bridge filter
You can add rules here like as in firewall, you just need to know what protocol/port to block