Wireless Access

Reply
Contributor I

Inter User Traffic Per SSID?

Can you deny inter user traffic per SSID or Network? I only see you can do this globally under stateful firewall settings.
Guru Elite

Re: Inter User Traffic Per SSID?

http://www.arubanetworks.com/techdocs/ArubaOS_6.4.4.x_WebHelp/Web_Help_Index.htm#ArubaFrameStyles/VirtualAPs/Virtual_AP_Profiles.htm?Highlight=virtual-ap

 

Check Deny Inter User traffic under the Virtual AP profiles.


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.3 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Contributor I

Re: Inter User Traffic Per SSID?

Awesome wasn't aware that was there as well, can this be done at a role level as well?
Aruba Employee

Re: Inter User Traffic Per SSID?

Hi Joseph,

 

I have a current deployment using 7220 and CAPs running AOS8.3 with no PEF license - this is a hospitality install. The guest SSIDs are all configured in bridge mode. The partner enabled Deny Inter User Traffic under the Virtual AP but he was able to connect two devices to the same SSID on the same AP and ping each other. Do you think this is a bug or is as designed?

Guru Elite

Re: Inter User Traffic Per SSID?

In bridge mode, the firewall is on the access point and the user table is not distributed.  I would open a TAC case to see if the combination of bridge mode and no PEF license is supported for this use case.


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.3 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: