Layer-3 forwarding for AP with L2 client forwarding disabled
Posted: Sun Jun 15, 2014 6:14 pm
Hi,
I'm currently struggling at the setup that for easier understanding I provided example picture below.
Let's say there's an AP with forwarding between wireless clients disabled. While disabling forwarding is a good thing for security this also means any communication between wireless clients that got IP addresses assigned from within same subnet is not possible. What I'd like to do is to somehow let Layer-3 forwarding through a gateway they all share. This is of course required for firewalling, centralized bandwidth and access control in general.
I don't want PPPoE and /32 tunnels, bridge firewalling at AP is also not favorable.
Is this even theoretically possible or I'm missing something?
I'm currently struggling at the setup that for easier understanding I provided example picture below.
Let's say there's an AP with forwarding between wireless clients disabled. While disabling forwarding is a good thing for security this also means any communication between wireless clients that got IP addresses assigned from within same subnet is not possible. What I'd like to do is to somehow let Layer-3 forwarding through a gateway they all share. This is of course required for firewalling, centralized bandwidth and access control in general.
I don't want PPPoE and /32 tunnels, bridge firewalling at AP is also not favorable.
Is this even theoretically possible or I'm missing something?
