I wan't to disable management on all but port 5, connect ports 2,3 and 4 to port 1 via the switch chip so it acts as an unmanaged switch and connect the 2 wireless radios to a vswitch with port 1 - this is so anything connected physically to port 2,3,4 or anything connected to the SSIDs will pickup a DHCP lease from my router (a pfSense box on the the other side of the house which will be connected to port 1)

Hopefully that makes sense. I basically want to use the hAP ac lite as a wireless extender with a few wired connections on top. I've actually set up the above before but have spent ages struggling to do it a second time - I don't know if the way you would do the above has changed after updates. If anyone could give me some basic steps I'd be grateful - but I use Linux rather than Windows so I need to do this via the web config or the command line.

connect to the router from port 5,
remove port 2 to port 4 from local bridge (default name would be "bridge")
create a bridge. say "uplink", then add port 1 to port 4 to it
disable default DHCP client on port 1
done

Hi, thanks for your reply.

I'm a bit confused as that's quite different from my old device - but I'm also confused as my old device is configured in a way that doesn't seem familiar! So I'm not sure if I'm mis-remembering how I configured it or a firmware upgrade changed either how it is configured or how it is displayed to me.

Can anyone say if the way my old device is configured makes sense? Is this the best way to achieve my goals?

Bridge1:
ether1, ether2, ether3, ether4, wlan1, wlan2

Switch1:
ether1, ether2, ether3, ether4, ether5, switch1cpu

Firewall rule 1:
Allow management via ether5
Accept input ether5

Firewall rule 2:
Block management via Bridge1
Drop input Bridge1

DHCP Server:
dhcp1 ether5