Hi I have 5 clients connected to a high site AP. The client routers cannot see each other.

I would like to link client1 and 2 with a transparent bridge and create another link between client 3 & 4. The two links must be isolated from each other and secure. The links must be relayed through the AP.

Client5 however, gets internet from the AP with a PPPoE connection there is a PPPoE server running on the AP's WLAN interface.

My problem is if the links can only be done securely with PPTP and EoIP, then it must be routed through the AP and therefor an IP address must be assigned to the WLAN interface of the AP. This I cannot do because an IP address should not be assigned to an interface on which a PPPoE server is running.

What is the solution to this problem?

Any help will be appreciated!

You can't have PPTP and PPPoE on same interface at same time. I use only PPTP and it's working perfectly good. ROS v.2.9, better than v.3.x.

If you want PPTP and PPPoE, than you need additional wlan interface.

You can secure links with WPA encryption, and disable forwarding of frames between clients with option default-forward in wlan interface setting.

Create a virtualAP.
No need for double the hardware.

Thank you idelac3 and tgrand. I will definately experiment with the virtualAP.

I have managed to create a pptp vpn tunnel through two PPPoE connections. I have set up the PPPoE server on the AP to hand out fixed remote IP addresses to the dial up clients who require the pptp tunnel and routed the PPTP tunnel between the fixed remote IP addresses handed out by the PPPoE server.

I have not yet put EoIP on top of the tunnel to bridge it, this will be my next step.

I have tested the PPTP tunnel through the 2 PPPoE interfaces, it works.