topic Client Isolation in Wireless

Client Isolation

MarkBrewster85862 — Thu, 02 Oct 2025 18:40:06 GMT

How do I configure Meraki SSID for Client Isolation? Posted earlier, but cannot find the result.

Re: Client Isolation

aleabrahao — Thu, 02 Oct 2025 18:50:08 GMT

Go to Firewall and Traffic shaping, select the SSID and aneble it.

https://documentation.meraki.com/MR/Firewall_and_Traffic_Shaping/Wireless_Client_Isolation

Re: Client Isolation

aleabrahao — Thu, 02 Oct 2025 18:51:09 GMT

In your other post I posted a screenshot;

https://community.meraki.com/t5/Wireless/Client-Isolation/m-p/282828

Re: Client Isolation

aleabrahao — Thu, 02 Oct 2025 18:54:59 GMT

Keep it in mind:

Client Isolation is available for SSIDs configured for Bridge mode however is disabled by default. When a SSID is configured for bridge mode, clients are bridged through the Access Point potentially to a specific VLAN. Upon connection to the AP, clients will be permitted to make a DHCP request on the VLAN they are assigned to. After DHCP is completed, the MAC address of the default gateway is tracked for the particular client.

NAT Mode Client Isolation

SSIDs that are configured for NAT Mode also have basic client isolation. Basic Client Isolation is enabled by default when the SSID is configured for NAT mode and cannot be disabled.

The implications of enabling NAT mode are as follows:

Devices outside of the wireless network cannot initiate a connection to a wireless client.
Wireless clients cannot use Layer 2 discovery protocols to find other devices on either the wired or wireless network.

For more information on NAT mode, please see NAT Mode with Meraki DHCP.