Given: a tower running Ubuntu with: wan0) an ethernet interface connected to the 'WAN' which is my internet source; eth0) an ethernet interface connected to my (not yet extant) LAN; and wl0) a wireless interface.
1) How do I bridge wan0 and eth0 transparently as if I were using a router in Bridge Mode?
2) How do I bridge wan0 and eth0 such that the tower is acting like a router, providing internet, creating a subnet, routing, etc?
3) How do I create a WPA or WPA2 network on wl0 with hostapd?
I have a tower I'm using as a server. Where I live, I am part of a controlled LAN (referred to as the WAN). The IT of this WAN registers computers, track use, ensure compliance, etc via MAC addresses. There are many end-users in the WAN, most of whom I don't know or trust. I want to create a LAN within this WAN so that I can protect myself and my network devices, with the caveat that the WAN sees each device, at least with respect to traffic. (You can try to convince me that this is not what I want, but I doubt you will sway me.)
The box currently has Ubuntu and Gentoo on it. Gentoo doesn't boot for kernel config reasons, but once I fix that, I plan for Gentoo to be the primary OS. I have two wired interfaces and one wireless. The wireless is an Ralink RT2760. I know this supports master mode via hostapd.
That I've had with implementing 1-3
1) With my experiments, either wan0 or eth0 had internet. What I mean by this is that either the tower had internet access, or the computer connected to eth0 had internet access.
2) Never got the DHCP voodoo working, not to mention routing. Not sure I have any idea what I was doing.
3) I created a network with SSID test, but my laptop wouldn't connect to it (connection timed out). It was broadcasting as an AP.
I want to use command line tools, daemons, .conf files, etc, because I have never had any luck at all getting things like Network Manager to work.
# lspci -s 03:02 -vvv
03:02.0 Network controller: Ralink corp. RT2760 Wireless 802.11n 1T/2R Cardbus Subsystem: Ralink corp. Device 2760 Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV+ VGASnoop- ParErr- Stepping- SERR+ FastB2B- DisINTx- Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=slow >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx- Latency: 64 (500ns min, 1000ns max), Cache Line Size: 64 bytes Interrupt: pin A routed to IRQ 22 Region 0: Memory at febf0000 (32-bit, non-prefetchable) [size=64K] Capabilities:  Power Management version 3 Flags: PMEClk- DSI- D1- D2- AuxCurrent=0mA PME(D0-,D1-,D2-,D3hot-,D3cold-) Status: D0 NoSoftRst- PME-Enable- DSel=0 DScale=0 PME- Kernel driver in use: rt2800pci Kernel modules: rt2800pci