topic Wireless IOSxe Client Ioslation and multicast in Wireless

Wireless IOSxe Client Ioslation and multicast

Alex-Pr — Thu, 18 Apr 2024 19:05:10 GMT

Hey everyone,

Questions - on a guest WLAN I have client isolation enabled via the Peer to Peer blocking action to drop. I can see it blocks peer to peer unicast traffic, however multicast traffic between peers still flows. I can limit the mdns messages by setting the mDNS mode to block but the rest of multicast messages like SSDP flows.

Is there a way to isolate the devices so it also blocks users from talking over multicast? (without disabling multicast globally?). Perhaps via the vlan on the WLC?

This is in iosXE

Thank you!

Re: Wireless IOSxe Client Ioslation and multicast

jagan.chowdam — Thu, 18 Apr 2024 20:08:42 GMT

Peer-to-peer blocking does not apply to multicast traffic.

Ref: https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-9/config-guide/b_wl_17_9_cg/peer-to-peer-client-support.html#:~:text=Peer%2Dto%2Dpeer%20blocking%20does,APs%20that%20broadcast%20the%20SSID.

Jagan Chowdam

/**Pls rate useful responses**/

Re: Wireless IOSxe Client Ioslation and multicast

Alex-Pr — Thu, 18 Apr 2024 23:20:39 GMT

Hi Jagan,

yes that matches my testing. What is the best way to block the multicast for the specific wlan?

thanks