Introduction to ssid-based user isolation, Configuring ssid-based user isolation – H3C Technologies H3C WX3000E Series Wireless Switches User Manual
Page 41
29
Step Command
Remarks
3.
Specify permitted MAC
addresses for the specified
VLANs.
user-isolation vlan vlan-list
permit-mac mac-list
Optional.
Up to 16 permitted MAC
addresses can be configured for a
VLAN.
NOTE:
•
To avoid network disruption caused by user isolation, H3C recommends that you add the MAC address
of the gateway to the permitted MAC address list and then enable user isolation.
•
If you configure user isolation for a super VLAN, the configuration does not take effect on the
sub-VLANs in the super VLAN, and you must configure user isolation on the sub-VLANs if needed.
Support for super VLAN depends on the device model. For more information, see "About the WX Series
Access Controllers Configuration Guides."
Introduction to SSID-based user isolation
SSID-based user isolation disables wireless users that use the same SSID from accessing each other at
Layer-2 to ensure the security of services and accounting accuracy.
Configuring SSID-based user isolation
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Configure a service template.
wlan service-template
service-template-number { clear |
crypto }
N/A
3.
Enable SSID-based user
isolation.
user-isolation enable
Optional.
By default, SSID-based user
isolation is disabled.
Isolating broadcasts and multicasts from wired users to wireless
users
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Isolate broadcasts and
multicasts from wired users to
wireless users.
undo user-isolation permit
broadcast
Optional.
By default, broadcasts and
multicasts from wired users to
wireless user are not isolated, and
broadcasts and multicasts from
wireless users to wireless users are
isolated.
- H3C WX5500E Series Access Controllers H3C WX3500E Series Access Controllers H3C WX2500E Series Access Controllers H3C WX6000 Series Access Controllers H3C WX5000 Series Access Controllers H3C WX3000 Series Unified Switches H3C LSWM1WCM10 Access Controller Module H3C LSUM3WCMD0 Access Controller Module H3C LSUM1WCME0 Access Controller Module H3C LSWM1WCM20 Access Controller Module H3C LSQM1WCMB0 Access Controller Module H3C LSRM1WCM2A1 Access Controller Module H3C LSBM1WCM2A0 Access Controller Module H3C WA3600 Series Access Points H3C WA2600 Series WLAN Access Points