Hello all,
I struggled with this for a while then realized the key was to get a DHCP server on eth1 so I had a reliable connection to play with the wan1 interface. I now have a stable config that survives reboots and serves as a wifi extender for wifi with no password and with a password.
Basically these are the steps:
0. Connect to the mAP Lite via wifi per usual. Upgrade the OS if necessary.
1. In IP -> Addresses give eth1 an address (for the DHCP server). Make sure the IP address is something like "172.16.9.1/24". After you say OK the address will look like "172.16.9.0".
2. create the DHCP server on eth1 with "DHCP Setup". You will create a new IP Pool. Make sure the pool matches the IP of eth1 (172.16.9.0, as above).
3. If necessary, under IP -> Firewall change the three rules that reference "wan1" to "eth1". There are two rules under "Firewall" and one rule under "Nat".
4. At this point I connected eth1 to my laptop and waited for a connection. Turn off your laptop wifi. You will have to re-connect to the mAP Lite with the IP address you created for eth1 (172.16.9.1, in my example)
5. Remove the DHCP server from wan1 and create the DHCP client for wan1. Nothing has to be configured here.
At this point you can connect to wifi that has no password:
6. Wireless -> Interfaces -> wan1. Set wan1 to Station mode. Scan for a network and connect. Do not worry if in red you see "Error: not in scan mode".
If you open IP -> "DHCP Client" you will see it searching for an IP then acquire one. If not, you will have to create a Bridge for wan1. under Bridge -> Bridge hit "+". Nothing has to be configured. Then go to Bridge -> Ports. Make sure the Interface is "wlan2" or whatever "wlan" interface you have.
You will then have to go to IP -> Firewall and change the three disabled (red-out) rules to reference "wan1". There are two rules under "Firewall" and one rule under "Nat".
If your wifi has a password:
6. Wireless -> Interfaces -> wan1. Set "station" mode and connect. You will not be connected to the internet. Wireless -> wan1 -> Setup Repeater. Provide the SSID and "passphrase". Leave "Address" blank. If you open IP -> "DHCP Client" you will see it searching. Wireless -> Interfaces will show a bridged interface off wan1
7. IP -> Firewall . You will see greyed-out rules in Firewall and Nat because those rules now have to point to the bridge created by the repeater. Change the three rules that reference "eth1" to "bridge1". There are two rules under "Firewall" and one rule under "Nat". IP -> "DHCP Client" picked up an IP.. At this point I was connected to the Internet.
As you connect to different wifi you will see new "security profiles" created.
As far as automation, I saved different backups on the flash and reboot into whatever config I need from eth1.
I don't know if the forum allows uploading of router images but I have a stock mAP Lite image that does all the above (no passwords).
I'm so happy I ordered another mAP Lite!!
Questions welcome.
_____
I can add to this developing "How-to"...
Switching Wifi Profiles
As you connect to dfferent public/private WiFis you will build up "Security Profiles" that allow you to connect to that Wifi again. they are found under "Wireless -> Security Profiles". You may have problems if one day you connect to, say, "HomeWifi" at home (which has a password) and the next day you are on the road and try to connect to "CoffeeHouseWifi". Your map Lite might not conect. things to check:
1. open "Wireless -> wlan2" (or whatever your "wlan" is). This is the screen where you "Scan" or "Setup repeater". You ~may~ see the mode as "station pseudobridge" or "station bridge". The SSID may be the last Wifi to which you were connected (say, "CoffeeHouseWifi"). The "Security Profile" may be "CoffeeHouseWifi-repeater" if there was a password.
You have to change a few values before you can connect back to "HomeWifi" or any other Wifi.
a. make sure your "mode" is set to "Station" - NOT "station pseudobridge" or "station bridge".
b. On that same page select the appropriate "Security Profile" from the dropdown or just pick "default".
c. Hit "Scan" and look for the Wifi you want.
d. Connect as you did above - depending upon if you need a password or not.
I usually have an xterm with 'watch -n1 ping yahoo.com' running in the background so I know when it connects.
Thanks again