Spent days and days now with Meraki, Kamikaze, X-Wrt and Chillispot. I am almost there, but now hopelessly stuck.

What I need is an AP with two SSID's, another with WPA-EAP, another open yet using Chillispot. Meraki has fullfilled all the requirements except the last. I have the two SSID's allright and WPA works OK.

Chilli provides me with DHCP service, that I can see from Chilli running in fg, but I get never redirected to the hotspotlogin.cgi or net. (The page is there, I can reach it manually)

Where I am lost is the iptables. Can someone please explain to me, how it goes with those in Meraki (with one ethernet port only). Or can this even work at all with this HW?

My /etc/config/network is here:
config interface loopback
    option ifname    lo
    option proto    static
    option ipaddr    127.0.0.1
    option netmask    255.0.0.0

config interface lan
    option ifname    eth0
    option type     bridge
    option proto    static
    option ipaddr    192.168.1.2
    option netmask    255.255.255.0
    option gateway    192.168.1.1
    option dns    192.168.1.1

and my /etc/config/wireless:
config wifi-device  wifi0
    option type     atheros
    option channel    '11'
    option diversity    '0'
    option disabled    '0'

config wifi-iface
    option device    wifi0
    option network    lan
    option mode    ap
    option ssid    'ssid-name-here'
    option encryption    'wpa'
    option hidden    '0'
    option isolate    '0'
    option txpower    '16'
    option bgscan    '0'
    option wds    '0'
    option server    'server-here'
    option port    '1812'
    option key    'secret-key-here'

config "wifi-iface" ""
    option device    'wifi0'
    option mode    'ap'
    option ssid    'another-ssid-here'
    option hidden    '0'
    option encryption    'none'
        option network 'lan'
    option isolate    '0'
    option txpower    '16'
    option bgscan    '0'
    option wds    '0'

and here is i<x>configs:

root@OpenWrt:~# iwconfig
eth0      no wireless extensions.

lo        no wireless extensions.

br-lan    no wireless extensions.

wifi0     no wireless extensions.

ath0      IEEE 802.11g  ESSID:"essid-name-here"  Nickname:""
          Mode:Master  Frequency:2.462 GHz  Access Point: 00:18:0A:01:3B:CF
          Bit Rate:0 kb/s   Tx-Power=16 dBm   Sensitivity=1/1
          Retry:off   RTS thr:off   Fragment thr:off
          Encryption key:FC8C-3B26-7353-B1B3-5B12-400A-C0FE-BB37 [2]   Security mode:open
          Power Management:off
          Link Quality=0/70  Signal level=-96 dBm  Noise level=-96 dBm
          Rx invalid nwid:18  Rx invalid crypt:0  Rx invalid frag:0
          Tx excessive retries:0  Invalid misc:0   Missed beacon:0

ath1      IEEE 802.11g  ESSID:"another-name-here"  Nickname:""
          Mode:Master  Frequency:2.462 GHz  Access Point: 06:18:0A:01:3B:CF
          Bit Rate:0 kb/s   Tx-Power=16 dBm   Sensitivity=1/1
          Retry:off   RTS thr:off   Fragment thr:off
          Encryption key:off
          Power Management:off
          Link Quality=0/70  Signal level=-96 dBm  Noise level=-96 dBm
          Rx invalid nwid:18  Rx invalid crypt:0  Rx invalid frag:0
          Tx excessive retries:0  Invalid misc:0   Missed beacon:0

root@OpenWrt:~# ifconfig
ath0      Link encap:Ethernet  HWaddr 00:18:0A:01:3B:CF
          UP BROADCAST RUNNING MULTICAST  MTU:2290  Metric:1
          RX packets:673 errors:0 dropped:0 overruns:0 frame:0
          TX packets:923 errors:0 dropped:9 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:63073 (61.5 KiB)  TX bytes:153000 (149.4 KiB)

ath1      Link encap:Ethernet  HWaddr 06:18:0A:01:3B:CF
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:387 errors:0 dropped:0 overruns:0 frame:0
          TX packets:358 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:40549 (39.5 KiB)  TX bytes:40149 (39.2 KiB)

br-lan    Link encap:Ethernet  HWaddr 00:18:0A:01:3B:CF
          inet addr:192.168.1.2  Bcast:192.168.1.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:2080 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1108 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:224022 (218.7 KiB)  TX bytes:445853 (435.4 KiB)

eth0      Link encap:Ethernet  HWaddr 00:18:0A:01:3B:CF
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1416 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1505 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:193993 (189.4 KiB)  TX bytes:495983 (484.3 KiB)
          Interrupt:4 Base address:0x1000

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

wifi0     Link encap:Ethernet  HWaddr 00:18:0A:01:3B:CF
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:23814 errors:0 dropped:0 overruns:0 frame:7603
          TX packets:1443 errors:56 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:199
          RX bytes:2096851 (1.9 MiB)  TX bytes:261607 (255.4 KiB)
          Interrupt:3 Memory:b0000000-b00ffffc

When I set dhcpif to ath1 Chilli talks to me OK when I try to connect via the open ssid. Otherwise it stays quiet.

Firewall config is directly from chillispot doc, I only have changed the interfaces to:
EXTIF="eth0"
INTIF="ath1"

So someone kindly helping me in dealing with the iptables would be deeply appreciated.

Thanks in advance.