I'm a relative newbie to this, so while this is probably a simple question - it's new to me.
I live in any area with fairly high wireless interference, so I recently bought an ASUS RT-N66U router, and reflashed it with the tomato-K26USB-1.28.RT-N5x-MIPSR2-112-Mega-VPN-64K build. So far everything has been working well, I have set up the 2.6 GHz network for our tenants, and the 5GHz network for us.
My current setup is as follows:
-Three SSID's are being broadcast. Call them SS1, SS2, and SS3. SS1 is the primary on the 2.6Ghz band, SS2 is the primary on the 5GHz band, and SS3 is a virtual wireless interface on the 5Ghz band (wl1.1)
-I have two bridge's - br0 and br1 - and 3 Vlan's. Vlan 1 controls the wired connections and has SS2 and SS3 assigned to it and uses br0. Vlan 2 controls the wan port and VLan 3 only has SS1 assigned to it and uses br1.
What I would like to do is have anything that connects to SS3 use a different set of DNS servers than anything else - but still be able to see everything controlled by bridge br0 (all the wired ports and anything connected to SS2). In other words, if a device connects to SS2 - it will use one set of DNS servers, but if it connects to SS3, it can still see everything - but uses a different set of DNS servers.
I have thought of adding another bridge with a different range of IP addresses, then assign wl1.1 to it, but then I don't know how to assign a different set of DNS servers to that IP range, or how to make it so that everything on the new bridge can access everything on the original bridge.
I believe it has something to do with IPTables entries - but I'm not sure where to enter them.
Any help or suggestions would be welcome.