wireless subnet

[Mustafa C. Kuscu]

> how can I use my AP for client and gateway link, and client's from
> 192.168.2.x not to have access to 192.168.1.x network

I don't know how to provide access control using hostap, but in order to
drop wireless 2.x clients from wlan0 going to 1.x eth0 (on your figure,
from top left towards bottom right), try :

(not tested)
iptables -m physdev -A INPUT --physdev-in wlan0 -s 192.168.2.0/24
--physdev-out eth0 -d 192.168.1.0/24 -j DROP

Regards,
Mustafa