Bridge, VLANs and Hotspot NAT

Hi all,
first post here, but an MT “basic” user from quite a long time…
I’m having a problem setting up my 333…
I am currently out of office and so I do not have access to the device to provide exact configurations but, basically, my setup is:

  • ether1 : phisically connected to uplink
    – vlan1 (on ether1): upstream
  • ether2 : plain ethernet, bridged to vlan1, serves static public IPs
  • ether3 : running a hotspot, network is private and NATted (srcnat masquerade by src subnet), should use same VLAN for upstream…

This setup is needed to allow ether2 to serve public IPs without authentication, whilst having other users to login… I am also setting different VLAN priority depending on incoming interface using bridge filter rules on incoming interface.

The problem is that when I enable the bridge between ether2 and vlan1, any traffic from authenticated users in the hotspot is not routed out of vlan1 anymore… As soon as I disable the bridge, hotspot resumes its uplink through vlan1 instantly…

I have tried a few variations on addressing, filtering, but with no luck. I cannot manage to have both working…

Any hint on what may be going wrong? It seemed to me quite a simple scenario, but obviously I am missing something. As a last resort, I am thinking to let this RB to act as the hotspot, and add another one which can take care of bridging among the three areas and do the vlan tagging…

Thank you for any help

Ciao
Stefano

Stefano,
please send me more information of your configuration with IP-address settings, filter rules amy bridge rules, etc.

regards,
Paul

Hi Paul, thanks for your interest. Unfortunately, I have no more the RB with me, and I cannot provide all the details you are asking.
I “solved” using two RB, uno to bridge and do the VLAN tagging and prioritiza<tion, and another just for the hotspot/nat.

If I manage to get another one I try to replicate the configuration and check again with you what may be wrong.

Thanks again
Stefano