Ruijie Community

Title: How to configure wireless isolation on ruijie AP in FAT or MACC mode? [Print this page]

Author: GTAC-Eureka Time: 2022-6-1 17:46
Title: How to configure wireless isolation on ruijie AP in FAT or MACC mode?
Edited by Eureka at 2022-6-1 17:57

Introduction of Wireless isolation
For the sake of security, customers want wireless users not to be able to access each other.

Applied scenarios

Key points of configuration
1. Confirm the wireless user isolation type
2. Configure wireless user isolation
3. Configure the allow wireless clients list who can access each other.
Configuration steps
(1) There are two types of wireless user isolation: AP-based user isolation and AP-SSID-based user isolation
1) AP-based user isolation, users within the same AP cannot access each other, as shown in the below picture:

Configuration with commands:

Ruijie(config)#wids

Ruijie(config-wids)#user-isolation ap enable

Ruijie(config-wids)#exit

Ruijie(config)#end

Ruijie#write

Configuration on eWeb:

2) AP-SSID-based user isolation means that users in the same WLAN on the AP cannot access each other:

Configuration with commands:

Ruijie(config)#wids

Ruijie(config-wids)#user-isolation ssid-ap enable

Ruijie(config-wids)#exit

Ruijie(config)#end

Ruijie#write

(2) Configure the allow list, users in the allow list are not subject to user isolation restrictions

Ruijie(config)#wids

Ruijie(config-wids)#user-isolation permit-mac 0811.9692.244c

Ruijie(config-wids)#exit

Configuration on Cloud:

Verification
1) After the user isolation is enabled, other users in the same wireless network cannot be pinged, but the Internet access is normal.
2) After adding the user to the allow list, you can ping other users in the same wireless network.

Note:

The user isolation function isolates only Layer 2 packet.
The SSID-based user isolation function under the AP only supports the isolation of unicast data packets, but cannot isolate broadcast and multicast packets.

Welcome to Ruijie Community (https://community.ruijienetworks.com/)