How to configure wireless isolation on ruijie AP in FAT or MACC mode?

Introduction of Wireless isolation
For the sake of security, customers want wireless users not to be able to access each other.


Applied scenarios




Key points of configuration
1. Confirm the wireless user isolation type
2. Configure wireless user isolation
3. Configure the allow wireless clients list who can access each other.
Configuration steps
(1) There are two types of wireless user isolation: AP-based user isolation and AP-SSID-based user isolation
1) AP-based user isolation, users within the same AP cannot access each other, as shown in the below picture:




Configuration with commands:

Ruijie(config)#wids  

Ruijie(config-wids)#user-isolation ap enable

Ruijie(config-wids)#exit

Ruijie(config)#end

Ruijie#write

Configuration on eWeb:




2) AP-SSID-based user isolation means that users in the same WLAN on the AP cannot access each other:






Configuration with commands:

Ruijie(config)#wids  

Ruijie(config-wids)#user-isolation ssid-ap enable  

Ruijie(config-wids)#exit  

Ruijie(config)#end  

Ruijie#write

(2) Configure the allow list, users in the allow list are not subject to user isolation restrictions

Ruijie(config)#wids  

Ruijie(config-wids)#user-isolation permit-mac  0811.9692.244c  

Ruijie(config-wids)#exit

Configuration on Cloud:




Verification
1) After the user isolation is enabled, other users in the same wireless network cannot be pinged, but the Internet access is normal.
2) After adding the user to the allow list, you can ping other users in the same wireless network.


Note:

• The user isolation function isolates only Layer 2 packet.
• The SSID-based user isolation function under the AP only supports the isolation of unicast data packets, but cannot isolate broadcast and multicast packets.