Sun May 22, 2022 1:16 pm
While I have the same impression like @rextended, there is a way to place some wireless clients connecting to a wireless interface connected to bridge1 into a dedicated VLAN on bridge1, using /interface wireless access-list. And if really necessary, you can link bridge2 to that VLAN by means of /interface vlan whose tagged end will be on bridge1 and the tagless end will be a member port of bridge2.
As for client identity, the wireless access list rules can only match on a MAC address of the client; more flexibility (username matching) might be available using a RADIUS server.
But regarding "connection of some local IPs to bridge2", I have no idea what you have in mind.
Can you describe the real requirement, i.e. what is the required difference in treatment of the two groups of wireless clients connecting to the same SSID? There may be a less twisted way to accomplish that.