My 4x 17dB 5GHz Sectors (wlan1,2,3,4) connected to SR5s are currently all bridged under bridge1, all are in ap-bridge mode. bridge1 has IP of 10.5.50.1.
CPEs are all RB133c in pseudostation-bridge - wlan1 and ether1 are bridged so the client PC can pass PPPoE to my AP. Clients receive 10.5.50.0/24 IP address.
Is this the best configuration for a P2MP setup? Any recommendations on how to setup a routed network?
Since you are going to NAT your customers, wouldn’t be better to give to each CPE a static ip to the wlan?
Then set up a dhcp server on each CPE and NAT the eth1.
So you don’t have to give any pppoe infos (less assistence todo) and you can get the rid of logging (each IP refers to a CPE and to an user)
About Security you can either lock authentication via MAC address or WPA (or both)
thinair -
Well I would certainly dump the bridge that’s for sure… There are a lot ways to switch over to routed, and maintain a decent amount of security and control…
For us - we lock things down by MAC address, use aes-ccm keys, and a few other things. We have a very secure network…
I have setup systems that use the HotSpot controller at the AP, a VPN to a central usermanger setup. A Hotspot controller alone… A HotSpot controller w/freeradius. All work very well.
Point is - securing or maintaining the integrity of who is authorized to access your wireless is pretty straight forward - it all depends on your comfort zone and what you feel is the most important aspect of the connection…
As to routing in and of itself… There are several ways to do that as well - static, OSPF, BGP, OSPF/MPLS. Simplest way is probably to learn static routing. once you understand how things actually GET routed - the protocols that automate routing (BGP / OSPF / etc) will make a lot more sense.
R/