So I decided I need to have a play with some routing etc. to setup a guest network, if for no other reason than to understand how it works.


So I have setup the VAP, it has its own network 172.16.0.x/255.255.255.0 with a DHCP Server, which is issuing IP's fine.

My issue now is the routing; I'm following these instructions which walk you through restricting access etc. to other bridges/interfaces. So using the first three commands under 'Restricting Access', I am able to enable Internet access for br1 (my new, separate bridge). Appears to work fine.

I want to test routing between br0 and br1, essentially to enable traffic as if they were on the same LAN. br0 is able to ping a device on br1 without setting up any routes myself, however br0 cannot ping back. 


Does anyone know how to enable this traffic? According to the guide, the second and third command line they give you for iptables should enable access straight off the bat, but it doesn't appear to be working...