wisp clients authentication

[fra]

hi!First of all sorry for my English! :oops:
My boss want to build a wisp and i must to buid clients auth architecture.
we have this components:
nanostations5;access points mikrotik;another mikrotik used like pppoe server; ubuntu+free radius.
I think to use nanostation in router mode and abilitate pppoe with auth parameters of client. this is a bad solution?
My main dubts are:
-if user creates an internal wireless lan without protection and someone is able to enter on nanostation, he can take mac and pppoe auth param. In this way he can enter on my network. Is it true?
-And after he is connected, can he see all the network? For example he can ping other users?
Thank you! :)

[garymansperger]

Hi,
I am not framilure with all of your questions, but your last point about seeing all of the network.
If you have the AP set to isolate clients they will not see everyone. this is a simple check box in AirOS.