Keeping Wireless clients segmented

[angel-moon]

Hello,

The goal is to have a wireless environment where no clients can reach each other.  They can only get to the AP and out to the Internet.  I am wondering if the possiblity of dynamically assigned VLANs that are given out via DHCP, 1 VLAN per IP address.  Is this possible or might there be some other way to keep the wireless clients sperated?

Thanks in advance!  All replies rated.

[Stephen Rodriguez]

Yes this is possible.  in the CUWN there is an option under the WLAN, Peer to Peer Blocking.  you can choose to allow, drop, or send the traffic upstream.

In the IOS environment, it is known as Public Secure Packet Forwarding.

Cheers,
Steve

--

If  this helps you and/or answers  your question please mark the question as "answered" and/or rate it, so  other users can easily find it.

[angel-moon]

Thanks for the reply.   As a followup, can this be accomplished without a controller?  The only equipment on site

will be a Cisco router and the APs.  Not even a Cisco switch.  smh.

[Stephen Rodriguez]

yes, the IOS calls it Public Secure Packet Forwarding, PSPF, make sure it's enabled.

Cheers,

Steve

--

If  this helps you and/or answers  your question please mark the question as "answered" and/or rate it, so  other users can easily find it.