H3C Technologies H3C WX3000E Series Wireless Switches - Manual (Page 505)

489
Item Description
AccessMAC
Specify the MAC addresses to be permitted by the AC. For more information, see
"
After user isolation is enabled ."
• Enter a MAC address in the field next to the Add button.
• Click Add to add the MAC address to the permitted MAC list.
• To delete a MAC address from the list, select an entry and click Delete.
IMPORTANT:
• Broadcast or multicast MAC addresses cannot be specified as permitted MAC
addresses.
• Up to 16 permitted MAC addresses can be configured for one VLAN.
To avoid network disruption caused by user isolation, add the MAC address of the gateway to the
permitted MAC address list and then enable user isolation.
If you configure user isolation for a super VLAN, the configuration does not take effect on the sub-VLANs
in the super VLAN, and you must configure user isolation on the sub-VLANs if needed.
Displaying user isolation information
Select Security > User Isolation from the navigation tree to enter the page displaying user isolation
configuration summary.
Figure 528 Displaying user isolation summary
User isolation configuration example
Network requirements
As shown in Figure 529 , isolate Client A, Client B, and Host A in VLAN 2 from one another while
allowing them to access the Internet. The MAC address of the gateway is 000f-e212-7788.