Hi,

I plan to buy RB2011UiAS and set it up as follows :
All Fast Ethernet ports bridged - Bridge1
All Gigabit ethernet ports bridged : Bridge2

Connections to Bridge 1 :
Uplink
Public AP1
Public AP2
Public AP3

Connections to Bridge 2 :
Home network

so to secure Home network from public traffic, I will need to setup NAT where WAN will be Uplink, but at the same time I need Uplink to be bridged to Public APs (without NAT).

Is this setup feasible?

thank you

m.s.

1)
make ether1 master port of "home" switch
and add ether2~ether5 as slave of ether1

NAT src-add masquerade from in-ip used on home net to out on ether6
add dhcp ip add etc for ether1

reserve ether10 for future use (or use that port for power cpe if uplink are coming from rb hardware)

2)
plug the uplink on ether6, master port of "public" switch
and add ether7~ether9 as slave of ether6

set ip, etc for uplink on ether6

the 3 ap are directly connected to uplink, you can configure as that.


If in your uplink can be attached only one devices, you can start from point 1) but not use 2) and :
plug the uplink on ether6, set ip, etc for uplink on ether6

set another dhcp, ip ,etc for ether7 (ap switch)
add ether8 and ether9 as slave of ether7
another NAT src-add masquerade from in-ip used on "ap switch" net to out on ether6