HOWTO: AP and subscriber sharing same BH

RouterOS General
1

Configuration:

                      |       |-(eth1-WAN)--->5.7BH <====>AP>BH>MT>net
        Sub1 (eth0)-->|  MT   |
                      |       |
                      |       |-(eth2-RAP)--->900AP <====> other subs

Hopefully my diagram held up on post…:slight_smile:

No bandwidth shaping needed here (done in the SM)
MT router at border is masquerading to our public IP

I want:
Sub1 and other subs to access internet through eth1-WAN
Sub1 to not be able to see other subs
other subs to not see Sub1
minimal management for VPN, etc.

What is the best way to do this in MT?
Bridging?:
2 bridges - eth0/eth1 and eth2/eth1

Routing?:
Just pass eth0 and eth1 through to the eth2 interface?

Any suggestion, pointers to documentation (what’s a brouter?) greatly appreciated.

Thanks,
Tom/BGW