I am running a wireless hotspot on an RB750 delivering public IPs to clients via Ubiquiti M5 radios.
The radios are operation in WDS (transparent bridge mode) and are bypassed. All seems fine and traffic is flowing after authentication.
Radius manager is taking care if the Mac authentication with static addressing specified in the user entry.
IP address allocation is set to one per client on the MT.
I have noticed an undesirable feature with this setup. If a client is a PC then the solution allocates a single IP, ie from/to address in the hotspot host entry is the same address.
However and here’s the problem if the client is a router then there are more than one address allocated. In this case from and to addresses are different. This results in the incoming connection going to one IP and outgoing traffic coming from the other.
This is not desirable, and the only way I have managed to overcome the issue is to bypass the client which removes the ability traffic shape per radius user.
Can anyone offer any guidance?