> On Sep 6, 2018, at 8:04 PM, Toke Høiland-Jørgensen <toke@toke.dk> wrote:
> 
> Pete Heist <pete@heistp.net <mailto:pete@heistp.net>> writes:
> 
>> But now, my neighbor will access the Internet through my CPE device,
>> but they must have a separate IP obtained through DHCP (i.e. a
>> separate MAC address as well), and I want to use cake to manage the
>> queue for both of us. I could do this with two routers and a
>> transparent bridge, but I want to see if I can make it work with as
>> few devices as possible, preferably just one EdgeRouter-X. I had two
>> failures thus far:
> 
> DHCP relay and normal routing? Or bridging with a kernel software bridge
> rather than the hardware switch?

I bet a regular software bridge would work. I’ll try it.

It looks like I’ll also need to do stateful firewalling for the neighbors. I was able to get my transparent bridge to do this with net.bridge.bridge-nf-call-iptables=1, I believe, so this should also theoretically work fine, somehow… :)