I would like to setup a MT box with a public hotspot on one port, a private office wired network on another port and load balance 2 internet gateways on a third port.
I don’t expect to have wifi in the box, just the hotspot controller and distributed wifi ap’s around the building.
Obviously I don’t want any traffic passing between the public and private networks.
I would also like to be able to VPN into the private office network.
Sound like you’ d need 4 ethernet ports. I’ve done it, except for the load balanced upstream part. Put the office on ether2, hotspot on ethernet3, make a firewall rule so hotspot ether3 traffic can’t comingle with office traffic. Setup a pptp server. You’d definitely want encryption if using office stuff through the public wifi stuff. If you don’t have enough ethernet ports, just setup the office and hotspot on different vlans and use a managed switch to get the right traffic to the right networks.