无线客户端隔离

[zw289277]

请问，各位大神，cisco 的WLC上如何做无线客户端的隔离？
即相同SSID下的客户端不可互访。我在SSID 的高级选项中开启了peer-to-peer blocking drop,好像没有效果。还是我的验证方法错误？
谢谢！

[one-time]

感谢您的提问！稍后会有小伙伴为您解答的！:)

[cco061800]

请参考：http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_01001111.html

[zw289277]

谢谢！按文档中的配置后，测试发现没有效果。就搁置了。:(

[zrone]

最后解决了吗，怎么解决的。

[net_hjw]

请配置Wi-Fi Direct Clients Policy，参考如下：
Configuring the Wi-Fi Direct Client Policy (GUI)
Step 1 Choose WLANs to open the WLANs page.
Step 2 Click the WLAN ID of the WLAN for which you want to configure the Wi-Fi Direct Client Policy. The WLANs > Edit page appears.
Step 3 Click the Advanced tab.
Step 4 From the Wi-Fi Direct Clients Policy drop-down list, choose one of the following options:
Disabled—Ignores the Wi-Fi Direct status of clients thereby allowing Wi-Fi Direct clients to associate
Allow—Allows Wi-Fi Direct clients to associate with the WLAN
Not-Allow—Disallows the Wi-Fi Direct clients from associating with the WLAN
Xconnect-Not-Allow—Enables AP to allow a client with the Wi-Fi Direct option enabled to associate, but the client (if it works according to the Wi-Fi standards) will refrain from setting up a peer-to-peer connection
Step 5 Save the configuration.

[Tiandao]

net_hjw 发表于 2017-5-31 14:05
请配置Wi-Fi Direct Clients Policy，参考如下：
Configuring the Wi-Fi Direct Client Policy (GUI)

这个测试过吗？

[Xiaoyao_998]

Wi-Fi Direct 是 WiFi client 直连 模式
Wi-Fi Direct Clients Policy

Drop-down list from which you can choose a Wi-Fi Direct Clients Policy for a WLAN.
Devices that are Wi-Fi Direct capable can connect directly to each other quickly and conveniently to do tasks such as printing, synchronization, and sharing of data. Wi-Fi Direct devices may associate with multiple peer-to-peer (P2P) devices and with infrastructure WLANs concurrently. Use the Cisco WLC to configure the Wi-Fi Direct Clients Policy, on a per WLAN basis, where you can allow or disallow the association of Wi-Fi devices with infrastructure WLANs, or disable the Wi-Fi Direct Clients Policy for WLANs.
Note Wi-Fi Direct Clients Policy is applicable to WLANs that have APs in local mode only.
The following options are available:
 • Disabled—Disables the Wi-Fi Direct Clients Policy for the WLAN and deauthenticates all Wi-Fi Direct clients
 • Allow—Allows Wi-Fi Direct clients to associate with the WLAN
 • Not-Allow—Disallows the Wi-Fi Direct clients from associating with the WLAN
 • Xconnect-Not-Allow—Enables AP to allow a client with the Wi-Fi Direct option enabled to associate, but the client (if it works according to the Wi-Fi standards) will refrain from setting up a peer-to-peer connection
层二 用户隔离 应该是加 ACL
Layer 2 ACL
List the layer 2 ACL that needs to be applied to the WLAN. ACLs are configured on the Access Control Lists page.

[Tiandao]

mysy2001 发表于 2019-9-23 08:43
Wi-Fi Direct 是 WiFi client 直连 模式
Wi-Fi Direct Clients Policy

二层ACL的写DHCP server和出口网关的mac ？