All,
We are a small town WISP, and have 3 towers. Each tower has three sectors and a backhaul that points back to the main office. Each sector has its own /24 subnet and is running a DHCP server. All AP’s are using OSPF. Each client has a CPE RB411 with WLan1 getting a IP from tower and Ether1 having 192.168.200.1/24 using scrnat/masquerade firewall rule At the main office we have a MAIN router that handles all customers bandwidth through simple queues using their IP address. I now have a customer that lives atop a hill and has installed a tower so he can get internet through us. And now has offed his tower to us to install an AP onto so we can pickup his neighbors as well. WE have completed the installation of a RB433AH with two radio cards. And have plugged the customer in to Ether1. Wlan1 has the backhaul and WLan2 has a single sector AP. Ether1 has a subnet of 192.168.200.1/24 and a DHCP server to provide the customer. It also has scrnat/masquerade firewall. All local traffic is showing up as 10.4.3.185 this is the IP address of the backhaul on his tower. This is fine. My problem is when I add WLan2 with a subnet of 10.5.1.1/24 running a DHCP server for new customers to connect. And I add the OSPF to the router. Is also passes the 192.168.200.1/24 route to the rest of the network and allows where on the network access past the masquerade firewall. I know how to do one or the other but sure can’t figure out how to do both on the same router. My only option is to install a CPE onto the tower for his house, just like I would at another customer location. Could someone please help me to keep from wasting a CPE somewhere that it is not needed.

Thanks, James

Hi neoknet,
you have 2 solutions here:
#1: use OSPF route filters to filter outbound route advertisments
#2: remove the network 192.168.200.0/24 from the advertised networks in the OSPF

I would personally go for the solution #2 which is the easiest and cleanest way.

Option 2 sounds good to me. How do I do that.
Thanks

neoknet,
go to Routing --> OSPF, under the tab networks remove the network 192.168.200.0/24
If you don't have it please post the output of the command and I will have a look.