Possible to setup something likes "protected port" on WLC 5508

[Khoa Pham]

Hello,

Let's say I have 3 APs, all connected to a WLC 5508

Each AP has a computer that is connected to it, Computer A, B and C, all on the same Vlan with same SSID

Is it possible to configure so

A and B can not talk to each other but both can talk to C  ?

Something like "protected port" feature in the switch world.

Thanks

[Scott Fella]

That is not possible, you either allow all devices to communicate or you can block communication to each device.

[Khoa Pham]

Can you elaborate this further ?

or you can block communication to each device.

Does it mean you can block communication between A, B and C. But they all can still talk to D, which is a device on wire network ?

Im looking for a solution for a WiFi network for our guests, where they dont need to talk to each other, and all need to talk to a wire internet gateway/router only.

[Scott Fella · Accepted solution]

You can block peer 2 peer communication between wireless devices on the same SSID.

[Leo Laohoo]

Im looking for a solution for a WiFi network for our guests, where they dont need to talk to each other, and all need to talk to a wire internet gateway/router only.

If you want to block guest SSID users from talking to each other then it's possible.  As Scott has pointed out, it's called "P2P Blocking Action".

I do NOT recommend having guest and corporate share the same SSID.  I don't think it's best practice.