The lay out:
1 Lan.
2 CAPs in local forwarding mode. (two ssid's: hotspot and wps)
2 Hostspots running over these CAPs.

Used VLANS for adding hotspots to local CAP's bridge. I WANT to use SAME VLAN and IP for both hotspots. Cap gets ip from LAN's dhcp server.

The problem:
In this scenerio login pages are interchanged randomly between two hotspots connected to main switch.

Since I can not assign bridge horizon from capsman to cap in LF, and lan and hotspot VLAN are on the same bridge... how can I isolate these hotspots from lan?

Tried ip firewall and bridge filter with no success.

Thanks in advance

Auto answer: There was eth1 in the same bridge as hostspot because i wanted Wpa (via virtual ssid) protected access too. Removing eth1 from the hotspot's bridge and adding a secon bridge and vlan for wpa accesss solved the issue.