dslreports logo
 
    All Forums Hot Topics Gallery
spc
Search similar:


uniqs
616
belias5
join:2008-02-08
North Stonington, CT

belias5

Member

USG 100: Block User-to-User Traffic on Same Subnet

I'm not sure this is possible (since I don't believe the traffic even makes it to the router interface), however I'm hoping someone has some ideas:

I have a VLAN setup for guest users - both WLAN and LAN. My wireless AP's allow for "guest mode isolation", where users can only see the Internet and not each other (even though they are on the same subnet).

Is there any way to easily set this up for the LAN users?

Thanks.

Brano
I hate Vogons
MVM
join:2002-06-25
Burlington, ON

Brano

MVM

Short answer: No.
Some more pointers here »LAN clients isolation..
belias5
join:2008-02-08
North Stonington, CT

belias5

Member

OK - thanks for the quick reply. I know this is a little out of the scope of the Zyxel forum - but can this be done with a Procurve 1810 or similar (Layer 2 switch)? Looks like I need the "Private VLAN" in Cisco-speak. Thanks again.

Brano
I hate Vogons
MVM
join:2002-06-25
Burlington, ON
(Software) OPNsense
Ubiquiti UniFi UAP-AC-PRO
Ubiquiti NanoBeam M5 16

Brano

MVM

I've posted some links to switches that can apparently do it »Re: LAN clients isolation.

...do your own research, download the manual and confirm. I don't own any of those nor have I tested the functionality.
belias5
join:2008-02-08
North Stonington, CT

belias5

Member

Thank you!
YDC
join:2007-11-13
Hewlett, NY

YDC to belias5

Member

to belias5
Make sure to disable IPv6 on your devices as IPv6 does not isolate by nature.