Iptables and brctl (bridge)

[jacsa]

Hi all,

I assembled a simple test environment: 1xWL500G in AP mode and 2xWL300G in Ethernet Bridge mode, latest Oleg's firmware. I set "Set AP Isolated" to Yes through WL500G-s web interface.

It seems it doesn't work, because I can ping a notebook connected to one WL300G from an other notebook, connected to the other WL300G.

Any idea?

Janos

[Oleg]

It works, but this feature is useless with current firmware, as it does not perform any filtering.

[jacsa]

Aha.
But I (as a little ISP) think that it would be very useful separating subscribers at MAC level, preventing the direct communication between "tricky" users, and stopping the spreading of the broadcasts on the wireless network.

Is there any other method to achieve this?

Or, what if I program the necessary code? I can program in C, but I have only a little knowledge in low level protocol and hardware programming.

It works, but this feature is useless with current firmware, as it does not perform any filtering.

[Oleg]

Yes, use OpenWRT and ebtables.