I don't know what you're missing, but we're missing more info.
- Radios are connected to eth1-eth5, I guess?
Yes, they are reachable through eth 1 and eth 2.
- What's their IP config, addresses, routes?
They are in 192.168.5.0/24, 192.168.10.0/24, 192.168.20.0/24, 192.168.30.0/24, 192.168.50.0/24 ip ranges in bridge mode.
And others in 172.16.1.0/24, 172.20.1.0/24, 172.30.1.0/24 in router mode.
For the ones on bridge mode I have added an IP for each subrange and can connect to all of them via web or via ssh.
Also can connect to all the ones in router mode.
- To what address are they connecting? I'd guess 192.168.88.88, but then you wouldn't need dstnat.
The main pppoe server is in 192.168.5.1. Most of the radios connect to APs on a switch that links to a PtP link to the server.
From that switch there is a PtP link to my router (connected to eth1). On Eth2 there is another AP for some radios near my zone.
I attached a small diagram.
- What's the IP config on router's bridge1?
I have added an IP for each subnet. I use the IP 192.168.5.3 to access it from outisde and 192.168.88.1 from eth6.
- What are your other firewall rules?
I have no other rules. The router was used simply as a switch, I'm just starting to set it up for the AC server.
You do not have the required permissions to view the files attached to this post.