
ZyAIR B-3000 User’s Guide
Chapter 6 Wireless LAN 68
6.5 Layer-2 Isolation Introduction
Layer-2 isolation is used to prevent wireless clients associated with your ZyAIR from
communicating with other wireless clients, AP’s, computers or routers in a network.
In the following figure, A represents your ZyAIR, B represents an AP, C represents a server
and 1, 2 and 3 represent wireless clients. If layer-2 isolation is enabled on the ZyAIR (A), then
wireless clients 1 and 2 cannot communicate with B, C or 3. Wireless clients 1 and 2 cannot
communicate with each other unless you enable Intra-BSS in the Wireless configuration
screen.
Note: In the Wireless configuration screen, the Enable Intra-BSS Traffic check box is
cleared when you enable layer-2 isolation.
If you want 1 and 2 to be able to communicate with C, B and/ or 3 then enter the MAC
addresses of C, B and/or 3 in the Allow devices with these MAC addresses table.
Figure 28 Layer-2 Isolation Application
MAC addresses that are not listed in the Allow devices with these MAC addresses table are
blocked from communicating with the ZyAIR’s wireless clients except for broadcast packets.
Layer-2 isolation does not check the traffic between wireless clients that are associated with
the same AP. Intra-BSS Traffic allows wireless clients associated with the same AP to
communicate with each other.
6.6 Layer-2 Isolation Configuration
If layer-2 isolation is enabled, you need to know the MAC address of the wireless client, AP,
computer or router that you want to allow to communicate with the ZyAIR's wireless clients.
Komentarze do niniejszej Instrukcji