I have a WLAN1 and a Virtual AP in bridge with my Ether1.
The ether1 is connected to a DHCP server, but in bridge mode, it also gives out DHCP to WLAN1 and VAP1 clients..
How do I stop DHCP reaching WLAN & VAP clients and use my own DHCP servers for this?
I would try something along these lines.
/interface bridge filter add action=drop chain=input dst-port=67 in-interface=WLAN1 ip-protocol=udp mac-protocol=ip
/interface bridge filter add action=drop chain=input dst-port=67 in-interface=VAP1 ip-protocol=udp mac-protocol=ip
This should drop any DHCP requests coming from those ports.
-Louis
This still doesn’t work…
To keep it simpler:
I have bridged my ether1 & wlan1
Any connection to wlan1 results in DHCP recieved from remote DHCP connected to ether1
If I disable the bridge, I recieve IP address from local DHCP server
Is the bridge overriding any filters?
Missing something here; why bridge if you don’t want the resources that a bridge provides?
Just trying to figure this out…
Do I have to set up routing and drop the bridge? if i want to have separate wlan’s & DHCP that is…
yes,
you can filter and drop them with bridge utility, try like this...
/in bri filt add chain=forward action=drop mac-protocol=ip ip-protocol=udp dst-port=67-68