well thx mr unikyrn..but i cnat change the coustomers CPE.. i just need a solution on my tower only....could mikrotik can be treated as a hardware firewall....
Then why are you asking for recommendations for a better CPE, since you use them?
And another thing UniKyrn, if you cannot access your clients CPE, why allow them to connect to your system?
I have full and total control over my CPE's that connect to my AP's as an added requirement.
As for CPE types, You could use Mikrotik CPE's seeing that your Ap is a mikrotik.
RB133c is an excellent choice IMO