H3C Technologies H3C WX6000 Series Access Controllers - Manual (Page 509)

44-2
Figure 44-1 User communication
AP
Client A
Client B
AC
Host A
Gateway
VLAN 2
Internet
After User Isolation Is Enabled
As shown in Figure 44-1 , user isolation is enabled on the AC. Client A and Client B, and Host A in VLAN
2 access the Internet through the gateway.
If you add the MAC address of the gateway to the permitted MAC address list, Client A, Client B,
and Host A in the same VLAN are isolated, but they can access the Internet.
If you add the MAC address of a user (Client A, for example) to the permitted MAC address list,
Client A and Client B, and Client A and Host A can access each other directly, but Client B and Host
A cannot.
To enable all the users in the VLAN to access one another and the Internet, you need to add the MAC
address of the gateway and the MAC addresses of the users to the permitted MAC address list.
Configuring User Isolation
Configuration Procedure
Select Security > User Isolation from the navigation tree, and click Add to enter the page for
configuring user isolation as shown in Figure 44-2 .