Stations are connected to different SSIDs with NAT mode enabled, but are able to discover each other
Options
Zyxel_JoyLee
Posts: 178 
Zyxel Employee
Zyxel Employee
in SSID
The NAT mode of an SSID is used to assign IP addresses to devices when there is no gateway or router in the environment to provide DHCP service. However, it is not a true Layer 3 isolation mechanism and cannot fully isolate devices from each other.
To prevent devices on different NAT-mode SSIDs from communicating with each other, enable the Guest Network function. This will automatically create firewall rules to isolate wireless clients.
- Go to Site-wide > Configure > Access points > SSID settings and enable “Guest Network"
2. Go to Site-wide > Configure > Access points > SSID advanced settings and the firewall rule is enabled
0
Categories
- All Categories
- 442 Beta Program
- 3.1K Nebula
- 234 Nebula Ideas
- 6.7K Security
- 695 USG FLEX H Series
- 366 Security Ideas
- 1.8K Switch
- 87 Switch Ideas
- 1.4K Wireless
- 56 Wireless Ideas
- 7.1K Consumer Product
- 312 Service & License
- 510 News and Release
- 97 Security Advisories
- 31 Education Center
- 10 [Campaign] Zyxel Network Detective
- 5.1K FAQ
- 34 Documents
- 89 About Community
- 114 Security Highlight