User`s manual
30
AP 1 AP 2
STA 1
STA 2
STA 3
Wireless Link
Ethernet Link
Switch
WCI:
All APs in This
Subnet
WCI:
All APs in This
Subnet
Behavior of the “All APs on This Subnet” wireless client isolation option.
As illustrated in the first figure when AP 1 and AP 2 are using the “This AP
Only” option, wireless traffic between STA 1 and STA 2 is blocked by AP 1.
While wireless traffic between STA 2 and STA 3, which are associated with
different APs, is still allowed. If the “All APs in This Subnet” option is used as
shown in second figure, AP 1 and AP 2 communicates with each other via an
inter-AP protocol to share their STA association information to block wireless
traffic among all the STAs.
There are up to 7 security modes depending on AP model variations:
y Open System: No authentication, no data encryption.
y Static WEP: WEP (Wired Equivalent Privacy) keys must be manually
configured.
y Static TKIP (WPA-PSK): Only TKIP (Temporal Key Integrity Protocol)
mechanism of WPA (Wi-Fi Protected Access) is enabled. In this mode,
users have to specify the Pre-shared key, which will be used by the
TKIP engine as a master key to generate keys that actually encrypt
outgoing
y IEEE 802.1x EAP without Encryption (EAP-MD5): The IEEE 802.1x
functionality is enabled and the user-name/password-based EAP-
MD5 authentication is used. No data encryption.