Layer 2 Isolation

nielsscheldeman

Hello,

Normally for Wireless I'd like to use Layer2 Isolation with only access to gateway and fileserver. However, I'm now at a client where we temporarily need to share a printer through a wireless computer with other wireless computers. So I entered both MAC Addresses in Layer 2 Isolation (Nebula), but still they can't ping eachother.

This is strange I think? Both wireless cliënts are connected to same AP. (9 AP's total, but they are in same room, so Intra-BSS Traffic blocking counts too)

Zyxel_Judy

Hi @nielsscheldeman ,

Based on your description, it appears that the problem as the printer and the PC are unable to ping each other when they are connected to the same SSID with the Layer 2 isolation feature enabled and the same AP.

Could you please verify if the MAC addresses for the gateway, printer, and PC have been correctly entered into the Layer 2 isolation feature's whitelist?

Also, ensure that the AP's configuration is Up to date before the time of conducting the ping tests.

Furthermore, I'd like to share that we conducted a simple replication of the scenario here and were able to achieve successful ping responses between two wireless clients.

If you've followed the above recommendation and the issue persists, please enable Zyxel support.

Additionally, please provide us with the name of your Nebula organization/site here or via the private message by clinking to my account > Message.

nielsscheldeman

Hello, yes both MAC Addresses were added(was a USB Printer connected to a wireless computer and another wireless computer needs to be able to print). It was on an existing Layer 2 isolation list that I added the MAC Addresses.

I'll set up a test environment in our own office to test this too. Thanks for the testing so far!

nielsscheldeman

To continue on this, I'm not sure if what I want is possible, but I'll try. Another client with Guestwifi has now a music installation with wireless controller for that music. I added MAC Address from that wireless controller to Layer 2 isolation, but it was still not visible for other wireless cliënts until I turned off Layer 2 Isolation. Is that because the wireless controller can't return traffic to the wireless cliënts because they aren't listed in L2 Isolation(just smartphones, so not ideal to put them all in that list)