Product and Software: This article applies to ArubaOS 6.1 and later.
Each virtual AP profile configuration now includes the ability to block traffic between clients that use that virtual AP.
The global firewall also includes an option to deny all inter-user traffic, regardless of virtual AP used by those clients. If this global setting is enabled, all inter-user traffic is denied, regardless of the settings configured in the virtual AP profiles. If the setting to deny inter-user traffic is disabled globally but is enabled on an individual virtual AP, only the traffic between untrusted users and the clients on that one virtual AP is blocked.
To use the WebUI to block traffic between users on a specific virtual AP:
1) Navigate to the Configuration > Advanced Services > All Profiles page and expand the Wireless LAN menu.
2) From the Virtual AP Profile menu, choose the virtual AP profile for which you want to block inter-user traffic.
3) Click the Deny Inter User Traffic checkbox.
4) Click Apply Changes.