It is important to a prospect of ours that the true MAC address of wireless hotspot users be visible on the directly connected wired network.

Basically the AP should work as a simple bridge with the hotspot allowing hotspot authorized traffic through the bridge unaltered, and unauthorized traffic being blocked or serviced by the hotspot in case of port 80.

Could someone please give me some pointer or links on setting this up?