topic Deny Traffic between 2 AccessPoints in Wireless

Deny Traffic between 2 AccessPoints

Raimund Schimanovits — Mon, 05 Jul 2021 15:33:20 GMT

How can i deny a traffic by 2 AccessPoints by 2 Clients?

So they will make a direct connection by my infrastructure LAN by 2 AccessPoints.

Is there a command where i can block and only allow the traffic to the internet on a Cisco 1532 AccessPoint?

Maybe the same as Wifi Direct but with 2 Accesspoints.

thanks

Re: Deny Traffic between 2 AccessPoints

Rasika Nayanajith — Mon, 23 Apr 2018 20:19:07 GMT

Are these AP are managed by single WLC ? if so you can set "P2P blocking action" to "Drop" under SSID advanced configuration.

HTH

Rasika

*** Pls rate all useful responses ***

Re: Deny Traffic between 2 AccessPoints

Raimund Schimanovits — Wed, 02 May 2018 08:50:07 GMT

They are standalone AP so no WLC.

If someone logged in at one AP and an other user on the other Ap they can make a direct connection by my infrastructure. So how can i deny this?

best regards

Re: Deny Traffic between 2 AccessPoints

Rasika Nayanajith — Wed, 02 May 2018 20:44:58 GMT

If you want to block clients connection within same AP, you can implement P2P blocking on radio level (it is known as Public Secure Packet Forwarding - PSPF in autonomous deployment)

Under specific radio interface (or sub-interface depend on you have multiple SSID), you can issue below command (use appropriate bridge group number as per your config).

bridge-group x port-protected

Above does not block if clients connecting to two different APs. If both APs connect to same switch, you can implement below.

https://learningnetwork.cisco.com/thread/31691

interface x/x

switchport protected

Give it a try and let us know how it goes

HTH

Rasika

*** Pls rate all useful responses ***