Wireless Client Isolation

[Haider12]

Hi, I am very new to Meraki, so any help is appreciated. How can I isolate Wireless clients on a certain SSID?
Layer 2 Lan isolation will not work because I need wired to wired and wired to wireless connection to work.
I am on bridged SSID. Thanks in Advance

[IvanJukic]

Hi @Haider12 ,

"isolate Wireless clients on a certain SSID". Sounds like NAT mode for the SSID should fit.

NAT Mode

https://documentation.meraki.com/Wireless/Design_and_Configure/Configuration_Guides/Client_Addressing_and_Bridging/SSID_Modes_for_Client_IP_Assignment#NAT_Mode

[joey.debra]

For decent roaming bridge mode is still the best.
Layer 2 LAN isolation will block 2 wireless clients on the same SSID to talk to each other but this will still allow one client to talk to another if it is on the same VLAN but on a wired connection. I'm not sure what happens if a different user is on another AP that that communication will be allowed.

So my personal take would be:
- Keep layer 2 LAN isolation on
- Use the Access point firewall and disallow any traffic to the same subnet.

[Philip D'Ath]

Are you wanting to prevent wireless clients talking to LAN clients, or prevent wireless clients talking to each other, or some other kind of isolation?

[Haider12]

I wanted to block wireless only clients from talking to each other. But wired to wireless should communicate (Like PC on Wi-Fi to Printer on Ethernet).
If I turn on Layer 2 LAN isolation, the printer becomes unreachable to wireless clients.