On Sep 6, 2018, at 8:04 PM, Toke Høiland-Jørgensen <toke@toke.dk> wrote:

Pete Heist <pete@heistp.net> writes:

But now, my neighbor will access the Internet through my CPE device,
but they must have a separate IP obtained through DHCP (i.e. a
separate MAC address as well), and I want to use cake to manage the
queue for both of us. I could do this with two routers and a
transparent bridge, but I want to see if I can make it work with as
few devices as possible, preferably just one EdgeRouter-X. I had two
failures thus far:

DHCP relay and normal routing? Or bridging with a kernel software bridge
rather than the hardware switch?

I bet a regular software bridge would work. I’ll try it.

It looks like I’ll also need to do stateful firewalling for the neighbors. I was able to get my transparent bridge to do this with net.bridge.bridge-nf-call-iptables=1, I believe, so this should also theoretically work fine, somehow… :)