Hi all,

I've two 433ah working as AP with 2 wifi cards. This 433ah is connected on my switch (no configurable) through the eth1 interface. The wifi cards and eth1 are on the bridge1.

I've my gateway (a rb1000) connected on the same switch throught the eth1 port.

I want to isolate the traffic between my two RB433ah then I think in use 2 VLANs, one for each RB433ah.

What do you think abou this? Will I be able to isolate the traffic? If yes how can I configure this without changing the bridge on my APs (rb433ah)?

Regards,
Fabrício

You can't use VLANs on a switch that doesn't understand VLANs.

If your switch does understand VLANs (doubtful since it's not configurable) you would just add VLAN interfaces to the physical interfaces facing the the switch, and instead of bridging the radios to the physical interfaces you would bridge them to the VLAN for customer traffic.

Hi fewi

I put the vlan1 and the both wifi interfaces of my RB433ah on the same bridge. From rb1000 I can ping the ip that I've set on the vlan1 interface, but the client registred on the wifi interface (wich gateway is on rb1000) can't ping the internet.

Can you help me?

Regards,
Fabrício

Check your firewall NAT and filter rules - the interface names have changed, so they may need adjusting.

If that doesn't work, post your actual configuration so people don't have to wildly guess.