Stopping double NAT on WAP LTE with RB951G-2Hnd

A thought and I don’t know if it’s doable. Here it goes: dedicate one ethernet port on 951 for connection to wAP. Configure 951 and wAP for point-to-point connectivity (as described here). Then have wAP do NAT towards LTE but make 1:1 nat with target being 951 (not sure if you can do 1:1 srcnat). I guess this would almost make wAP behave as bridge between LTE and ethernet, only IP address gets changed. I don’t think you can get by without NAT on wAP.

You might want to throw VLAN into the mix for various reasons:

  • if you want to have management access to wAP directly from LAN and not through 951, given that wAP has only got single ethernet port. For this resson, you’d have two VLANs on the wire between both MTs, one would be bridged to LAN in 951, the other one would be used for internet traffic.
  • if you’re running short of ethernet ports on 951 but you happen to have spare VLAN capable switch … then you can run several VLANs in trunk connection between 951 and switch and configure ports on switch as access ports for those VLANs … on 951 you would use vlan interfaces just like you’re using “real” interfaces right now