I feel like I’m missing something really basic.
I’m putting together a relay unit (see figure) to be able to serve a few customers (right) who are behind a hill from my my main AP (left), but who can all see one other particular subscriber (center). We plan to replace the center subscriber’s CPE with this unit so we can serve everybody.

In the past when I’ve had to solve this problem, I’ve just done a quick and dirty cobbling together of a discrete AP and a discrete CPE, run them through a dumb switch, and gave the customer a SOHO router indoors. This time I wanted to try something more intelligent with the StationBox enclosure product.
I have the configuration working, but with one annoyance. The CPEs (right) of the customers served by the relay unit can’t get out to the internet unless I specify 192.168.1.50 as their “gateway” instead of 192.168.1.1.
The reason I’m pretty sure I’m missing something basic is that this isn’t the case in any of the cobbled-together sets of dumb units that I’ve previously used to do the same job in other places – the downstream users could all specify the “real” router at 192.168.1.1 as their gateway (just like everybody else’s CPE did) and everything worked wonderfully.
Not only am I pretty sure I’m missing a routing rule, but it would have to be a rule so basic that three cobbled-together dumb units can automatically figure it out with no help. ![]()
Here are the relevant rule sets:
[admin@Relay] > /int print
Flags: D - dynamic, X - disabled, R - running, S - slave
# NAME TYPE MTU L2MTU
0 R Feed wlan 1500 2290
1 R AP wlan 1500 2290
2 ;;; User port
POE ether 1500 1526
3 R RelayBridge
[admin@Relay] > /int bridge port print
Flags: X - disabled, I - inactive, D - dynamic
# INTERFACE BRIDGE PRIORITY PATH-COST HORIZON
0 Feed RelayBridge 0x80 10 none
1 AP RelayBridge 0x80 10 none
[admin@Relay] > /ip address print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK BROADCAST INTERFACE
1 ;;; Local user router
192.168.10.1/24 192.168.10.0 192.168.10.255 POE
2 ;; WAN Address
192.168.1.80/24 192.168.1.0 192.168.1.255 RelayBridge
[admin@Relay] > ip route print
Flags: X - disabled, A - active, D - dynamic, C - connect,...
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 RelayBridge 1
1 ADC 192.168.1.0/24 192.168.1.80 RelayBridge 0
2 ADC 192.168.10.0/24 192.168.10.1 POE 0
[admin@Relay] > ip firewall nat print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat action=masquerade out-interface=RelayBridge
[/size]