Stations are connected to different SSIDs with NAT mode enabled, but are able to discover each other
Options
Zyxel_JoyLee
Posts: 184 
Zyxel Employee
Zyxel Employee
The NAT mode of an SSID is used to assign IP addresses to devices when there is no gateway or router in the environment to provide DHCP service. However, it is not a true Layer 3 isolation mechanism and cannot fully isolate devices from each other.
To prevent devices on different NAT-mode SSIDs from communicating with each other, enable the Guest Network function. This will automatically create firewall rules to isolate wireless clients.
- Go to Site-wide > Configure > Access points > SSID settings and enable “Guest Network"
2. Go to Site-wide > Configure > Access points > SSID advanced settings > Intra-BSS traffic blocking and the firewall rule are enabled
0
Categories
- All Categories
- 442 Beta Program
- 3.1K Nebula
- 234 Nebula Ideas
- 6.7K Security
- 707 USG FLEX H Series
- 369 Security Ideas
- 1.8K Switch
- 87 Switch Ideas
- 1.4K Wireless
- 56 Wireless Ideas
- 7.1K Consumer Product
- 314 Service & License
- 512 News and Release
- 99 Security Advisories
- 31 Education Center
- 10 [Campaign] Zyxel Network Detective
- 5.2K FAQ
- 34 Documents
- 89 About Community
- 116 Security Highlight