Block interclient communication

[marton]

The VxWorks verison of the AP1200 had an option to block all interclient communication. Unfortunately I can't find this feature in the IOS version yet...

Do you know how to do this in IOS?

Thanks in advance!

[wong34539]

Block Inter-Client Communication with PSPF Feature

Publicly Secure Packet Forwarding (PSPF) prevents client devices associated to a bridge or access point from inadvertently sharing files with other client devices on the wireless network. PSPF provides Internet access to client devices without providing other capabilities of a LAN. With PSPF enabled, client devices cannot communicate with other client devices on the wireless network. This feature is useful for public wireless networks like those installed in airports or on college campuses.

Follow these steps to enable PSPF on your access point or bridge:

Step 1 Browse to the Association Table Advanced page:

a. On the Summary Status page, click Setup.

b. On the Setup page, click Advanced under Associations.

Step 2 Select Yes for Block ALL Inter-Client Communications (PSPF).

Step 3 Click Apply or OK. PSPF is enabled.

[jnennemann]

My web interface is different (maybe you were doing it from memory?);

1- Select 'Network Interfaces' from the menu

2- Select 'Radio0-802.11B' (your's may differ here)

3- Select the 'Settings' tab

4- Scroll down to 'Public Secure Packet Forwarding'

5- Select 'Enable' vs. the default 'Disable'

Thanks for the tip wong34539, I would not have found it by the way it is listed.

[towler]

I found the following after a quick search:

http://www.cisco.com/en/US/products/hw/wireless/ps430/products_installation_and_configuration_guide_chapter09186a008014868c.html#1038494

To enable and disable PSPF using IOS commands on your access point, you use bridge groups.

PSPF is disabled by default. Beginning in privileged EXEC mode, follow these steps to enable PSPF:

configure terminal

interface dot11radio {0|1}

bridge-group group port-protected

end