lambition
join:2004-08-26
Centreville, VA
 ·ITalkBB
2 edits | Virtual network between a client and the router/AP ?
I want to create virtual network between a client and the router or AP, so that all other clients on the same network are invisible to the client.
I know it is possible because my school (university) does that. I knew what it is called, but now I have forgotten what it is called.
It creates a virtual network with subnet mask of 255.255.255.252, so that there can only be 2 IP addresses in the network. IP addresses are random.
Does any one know what it is called and how I can accomplish this?
Thank you. |
|
g3neration
join:2005-11-04
Brooklyn, NY | Not sure why but wouldnt it be easier to add an ACL to deny traffic between the two networks? |
|
lambition
join:2004-08-26
Centreville, VA
·ITalkBB
| Well. It won't be two networks if implementing what I explained above.
It will be like every Wi-Fi client has their own network. And since IP addresses will be given by DHCP server, I cannot predict what will have what IP. (unless DHCP server is programmed to work with it some how.) |
|
docrice
join:2008-03-31
Fremont, CA
| You want each client to be in its own /30? Maybe this is accomplished via dynamic VLANing and layer 3 switching?
This isn't exactly the same thing, but Cisco APs (at least the older 1230 series) have a feature called "Public Secure Packet Forwarding" also referred to as "client isolation" by other manufacturers. It's basically a way for associated stations from being able to communicate with one another. That should accomplish essentially the same thing as an isolated collision domain. |
|
lambition
join:2004-08-26
Centreville, VA
·ITalkBB
1 edit | Thanks.
Although it is not exactly what I mentioned, I think that is exactly what I needed. 
It would be great if I can do that on wired network too, but it seems I will be needing Layer 3 switch. |
|
Angelo_
The Network Guy
Premium
join:2002-06-18
 ·TekSavvy Solutions..
| reply to docrice
said by docrice  :You want each client to be in its own /30? Maybe this is accomplished via dynamic VLANing and layer 3 switching? This isn't exactly the same thing, but Cisco APs (at least the older 1230 series) have a feature called "Public Secure Packet Forwarding" also referred to as "client isolation" by other manufacturers. It's basically a way for associated stations from being able to communicate with one another. That should accomplish essentially the same thing as an isolated collision domain. you mean wds? |
|
