So the 2011 becomes a perimeter device on your network?
If so, plug B315 in on a port, set that port as a DHCP client. Add a route for 0.0.0.0/0 via that IP of the B315, and Bob’s your uncle…
Summising form the title you want MAC filtering (only allow listed devices)?
For each device that would be allowed access:
;;; Allow TA
chain=MAC-filter action=accept in-interface=bridge1 src-mac-address=F4:B5:49:F1:7D:25 log=no log-prefix=""
Use Comments, will save lots of time when troubleshooting, set in-interface to desired port, change mac-address to that of the desired device(s)
End off with this one to drop everything else (DO NOT ENABLE UNTIL YOUR DEVICE IS ADDED!!!):
;;; Deny all other MAC’s
chain=MAC-filter action=drop in-interface=bridge1 log=yes log-prefix=""
The AP is an old LTE router that I’m using as an AP now. I will probably have to get all the mac-address from the AP and list them in the RB. I take it the rb will not know what devices is connected to the AP?
If it is in routing mode and a different subnet, no the RB will not know. Using this as an AP may give you some glitches, you would have to set it in the same subnet as your network, disable DHCP, etc…
You would have to do some routing of sort to do more than monitoring, quite a few vids on Youtube would take you through the teachings of how to achieve this. Some of the things you would need to do:
Disable DHCP on the B315
Enable DHCP on the 2011
Most likely you would need to bridge some (not all) of the ports on the 2011 to provide your LAN. Connect the B315 to one of these bridged ports.
I my self have not had any success on disabling dhcp on a B315 using iets wifi if jou find out how please net me know, I can disable the Lan side but somehow iet fails to do it on the wifi side.
