Hotspot and other

hi to all,
i have two MT in this configuration:

Internet —(eth1)— MT1—Wlan1—AP( with hotspot functionallity)
|
|
Wlan2 (p2p) to MT2

MT1 ----Wlan2----MT2—Wlan1—AP (with hotspot functionality)
I wolud centralized radius only in the MT1

which are best practice’
Routing on the all interface?
Could you tell me any idea?

Best regards

Greetings!

I hope this question is going to be multiple choice. I am not very good at essay questions! :smiley:

If you want only one MT box as the radius auth gateway, then it has to be the only gateway between the LAN and the internet, and it does all the radius auth. The hotspot should be on it also. All other devices should be APs or bridges. No NAT on other devices.

So “A” is the answer. Actually, this way:

Internet —(eth1)— MT1(hotspot on wlan1&2)—Wlan1(AP)
__________________|
|
Wlan2 (bridge) —Wlan2—MT2—Wlan1(AP)

EDIT: I read, but did not want to step on, your next post. I had VERY POOR results when I tried NAT on the LAN with the hotspot gateway. And, besides, that would be an essay question!

Thanks,
actually my configuration is ok, but it’s more complex.
MT1 e MT2 have more rules like src-nat masquerading or routes.
Are there any problem like DHCP server or Nat one to one or l2 isolation client or other in your configuration?

Best Regards