User`s guide

Chapter 8 AP Profile
NWA5120 Series User’s Guide
88
8.3.4 Layer-2 Isolation List
Layer-2 isolation is used to prevent wireless clients associated with your NWA from communicating
with other wireless clients, APs, computers or routers in a network.
In the following example, layer-2 isolation is enabled on the NWA to allow a guest wireless client
(A) to access the main network router (B). The router provides access to the Internet and the
network printer (C) while preventing the client from accessing other computers and servers on the
network. The client can communicate with other wireless clients only if Intra-BSS Traffic blocking is
disabled.
Note: Intra-BSS Traffic Blocking is activated when you enable layer-2 isolation.
Figure 48 Layer-2 Isolation Application
MAC addresses that are not listed in the layer-2 isolation table are blocked from communicating
with the NWA’s wireless clients except for broadcast packets. Layer-2 isolation does not check the
traffic between wireless clients that are associated with the same AP. Intra-BSS traffic allows
wireless clients associated with the same AP to communicate with each other.
Add Click this to add a MAC address to the profile’s list.
Edit Click this to edit the selected MAC address in the profile’s list.
Remove Click this to remove the selected MAC address from the profile’s list.
# This field is a sequential value, and it is not associated with a specific user.
MAC This field specifies a MAC address associated with this profile.
Description This field displays a description for the MAC address associated with this profile. You can
click the description to make it editable. Enter up to 60 characters, spaces and underscores
allowed.
OK Click OK to save your changes back to the NWA.
Cancel Click Cancel to exit this screen without saving your changes.
Table 41 SSID > MAC Filter List > Add/Edit MAC Filter Profile (continued)
LABEL DESCRIPTION