Cisco Wireless - Client hidden from each other possible ?

Question

Hi All,We are using Cisco wireless access points, we would like for the associated clients to not to be able to see each other, is this possible? The solution is wireless internet access for an office block with many businesses. But we don't want company 1 from seeing company 2. we thought VLANS but we also need DHCP to work for each client computer. We can if needed buy additional Cisco hardware to do this if needed.Can the access point do this somehow? Does anyone have any ideas?Many thanks for you time,corbett at postmaster dot co dot ukCraig.

Uli Link · Accepted Answer

Merv schrieb:This works only between clients on a single AP.A client associated to AP1 can always reach a wireless station associated to AP2 because both APs bridge the traffic between different interfaces in the bridge group, even if "port-protected".If you want to separate traffic from different business you'll may want a VLAN setup.

Merv · Answer

check out protect port command on bridge groupbridge-group  port-protected

corb · Answer

you'll may wantVLAN yes we have looked, but we cannot setup DHCP on the AP per VLAN

thrill5 · Answer

You can definitely do this if you have a WLAN controller, like a 4402. Makes it very easy to setup AP's and WLANs (Wireless LANs).Scott

Aaron Leonard · Answer

~ Merv schrieb:~ > check out protect port command on bridge group~ > ~ > bridge-group ~ >  port-protected~ > ~ ~ This works only between clients on a single AP.~ A client associated to AP1 can always reach a wireless station ~ associated to AP2 because both APs bridge the traffic between different ~ interfaces in the bridge group, even if "port-protected".~ ~ If you want to separate traffic from different business you'll may want ~ a VLAN setup.I'd recommend crafting ACLs.  I.e. on each access point's radio interface,have the following input access lists:bridge ACL: forbid all non-IP packetsIP ACL:permit IP packets sourced from 0.0.0.0 port bootpcforbid IP packets sourced from anything but the client rangeforbid IP packets sourced from the client range and addressed to the client rangeblock MS junkstuff like that ...[the above is not tested by me]

Cisco Wireless - Client hidden from each other possible ?

Join the Discussion

Didn't find your answer?